Lead review
Suspicious score 50/100 · text cluster · 5 accounts · 7 posts
View in 3D: where it comes from and what it is linked to
First seen Sat 14 Nov 19:45 UTC, last Sat 14 Nov 20:12 UTC. Languages: ar 7
Coordinated activity by accounts with several signs of being inauthentic.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Queued: Nemotron investigates suspicious and watch clusters, highest score first.
Activity per minute
28 minutes, peak 2 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 100% | ≥ 50% | yes | 100% of posts repeat near-identical text from another account. |
| coordination | synchrony | 29% | ≥ 50% | no | 29% of the activity happened within a single minute. |
| coordination | repetition | 1.4 | ≥ 2.0 | no | Each account posted this 1.4 times on average. |
| coordination | cross_cluster | 100% | ≥ 50% | yes | 100% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 14% | ≥ 40% | no | 14% of the accounts were created within the same 72 hours. |
| account | low_reach | 86% | ≥ 60% | yes | 86% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 100% | ≥ 50% | yes | 100% of the accounts have no profile picture or no bio. |
| account | template_bios | 0% | ≥ 30% | no | 0% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 0% | ≥ 30% | no | 0% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 0% | ≥ 50% | no | 0% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (7, 1 no longer on Bluesky)
Median account age: 619 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; the team sees all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| account 1 | 552 | 9 | 64 | 2 | active |
| account 2 | 726 | 6 | 75 | 1 | active |
| account 3 | 619 | 6 | 60 | 1 | active |
| account 4 | 538 | 15 | 82 | 2 | active |
| account 5 | 474 | 4 | 79 | 1 | active |
| account 6 | 668 | 7 | 67 | 1 | active |
| amalingaza5.bsky.social Amal From Gaza | 758 | 0 | 12 | 1 | removed from Bluesky |
Sample posts from already-public cases
| Time (UTC) | Account | Text |
|---|---|---|
| 20:18:38 | amalingaza5.bsky.social | could you please repost my post? I’d be thankful. open |
Clusters sharing accounts with this one (24 h)
Human review
No human decision yet.
Anyone can review. Your decision is kept with the visitors' reviews, apart from our own figures. Decide with the bar at the bottom of the screen; it moves on to the next cluster nobody has reviewed.