Lead review
Suspicious score 70/100 · text cluster · 13 accounts · 35 posts
View in 3D: where it comes from and what it is linked to
First seen Sat 14 Nov 19:20 UTC, last Sat 14 Nov 20:19 UTC.
Coordinated activity by accounts with several signs of being inauthentic.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Insufficient evidence confidence high · recommended: human review
Twelve Bluesky accounts posted the same begging template -- "Hi [name], Please help my family survive.🙏" -- each with a different first name (Kate, Lissa, AlsaFrontera, Zabba, Ruby, Bearly, Jenny, Hayley, Climate, Kevin, Eric, John), spread across roughly 24 minutes on 2026-11-14 (P1-P12). The posts contain no links, images, or videos. The narrative is a personal appeal for financial assistance, presenting each account as an individual whose family is in mortal danger and asking a named person for help, consistent with a financial-assistance scam lure. No verifiable news claim is made.
Narrative: Twelve Bluesky accounts posted the same begging template -- "Hi [name], Please help my family survive.🙏" -- each with a different first name (Kate, Lissa, AlsaFrontera, Zabba, Ruby, Bearly, Jenny, Hayley, Climate, Kevin, Eric, John), spread across roughly 24 minutes on 2026-11-14 (P1-P12). The posts contain no links, images, or videos. The narrative is a personal appeal for financial assistance, presenting each account as an individual whose family is in mortal danger and asking a named person for help, consistent with a financial-assistance scam lure. No verifiable news claim is made.
Strongest innocent explanation considered: Independent people genuinely asking for assistance, or fans/mutual-aid users sharing a similar request; disclosed bots or automated feeds; an organisation's own feed accounts.
- S:copy_paste = 100%: every post repeats the identical template; only the name is swapped (P1-P12).
- S:empty_profiles = 100%: all 12 accounts have no avatar and no bio (A1-A12), indicating disposable accounts.
- S:creation_burst = 58%: a majority of accounts were created within the same 72 hours; A1, A2, A4, A6, and A10 were all created 803-805 days ago.
- S:repetition = 2.33: each account posted the template about 2.3 times on average.
- S:cross_cluster = 100%: every account also appears in at least two other flagged clusters within 24 h, indicating the accounts belong to a wider coordinated operation.
- No grounded claim supports 'staged'.
Manipulation techniques
| Technique | Exact words | Why | Post |
|---|---|---|---|
| fear_appeal | “Please help my family survive.🙏” | The text threatens the listener with the death or ruin of the poster's family to extract help. | P1 |
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v6, Sat 19:51 UTC, 2 model calls, 37.8 s · 100% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S detector signal.
Activity per minute
60 minutes, peak 3 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 100% | ≥ 50% | yes | 100% of posts repeat near-identical text from another account. |
| coordination | synchrony | 9% | ≥ 50% | no | 9% of the activity happened within a single minute. |
| coordination | repetition | 2.69 | ≥ 2.0 | yes | Each account posted this 2.7 times on average. |
| coordination | cross_cluster | 100% | ≥ 50% | yes | 100% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 54% | ≥ 40% | yes | 54% of the accounts were created within the same 72 hours. |
| account | low_reach | 46% | ≥ 60% | no | 46% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 100% | ≥ 50% | yes | 100% of the accounts have no profile picture or no bio. |
| account | template_bios | 0% | ≥ 30% | no | 0% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 0% | ≥ 30% | no | 0% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 0% | ≥ 50% | no | 0% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (13, 12 no longer on Bluesky)
Median account age: 805 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; the team sees all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| kcristny.bsky.social Mahmoood | 805 | 8 | 14 | 5 | removed from Bluesky |
| vny3.bsky.social Mahmoood | 805 | 13 | 6 | 4 | removed from Bluesky |
| lolli0201.bsky.social Mahmoood | 759 | 8 | 11 | 4 | removed from Bluesky |
| balke.bsky.social Mahmoood | 805 | 12 | 10 | 3 | removed from Bluesky |
| delavald.bsky.social Mahmuud | 804 | 18 | 20 | 1 | removed from Bluesky |
| tinydojongho.bsky.social Mahmuud | 806 | 59 | 56 | 1 | removed from Bluesky |
| franjudinhadasilva.bsky.social Mahmuud | 805 | 11 | 9 | 4 | removed from Bluesky |
| account 8 | 1125 | 21 | 20 | 1 | active |
| saeeedv.bsky.social Mahmoood | 547 | 6 | 7 | 1 | removed from Bluesky |
| buvelleshiro.bsky.social Mahmuud | 806 | 29 | 79 | 4 | removed from Bluesky |
| fox1132.bsky.social Mahmuud | 659 | 1 | 2 | 5 | removed from Bluesky |
| filippomearelli.bsky.social Mahmoood | 652 | 6 | 10 | 1 | removed from Bluesky |
| docteurmomo.bsky.social Mahmuud | 728 | 0 | 1 | 1 | removed from Bluesky |
Sample posts from already-public cases
| Time (UTC) | Account | Text |
|---|---|---|
| 19:20:45 | kcristny.bsky.social | Hi Kate, Please help my family survive.🙏 open |
| 19:22:07 | vny3.bsky.social | Hi Lissa, Please help my family survive.🙏 open |
| 19:23:39 | lolli0201.bsky.social | Hi AlsaFrontera, Please help my family survive.🙏 open |
| 19:24:25 | balke.bsky.social | Hi Zabba, Please help my family survive.🙏 open |
| 19:31:13 | delavald.bsky.social | Hi Ruby, Please help my family survive.🙏 open |
| 19:32:23 | tinydojongho.bsky.social | Hi Bearly, Please help my family survive.🙏 open |
| 19:33:36 | franjudinhadasilva.bsky.social | Hi Jenny, Please help my family survive.🙏 open |
| 19:35:01 | saeeedv.bsky.social | Hi Climate, Please help my family survive.🙏 open |
| 19:35:50 | buvelleshiro.bsky.social | Hi Kevin, Please help my family survive.🙏 open |
| 19:43:01 | fox1132.bsky.social | Hi Eric, Please help my family survive.🙏 open |
| 19:43:48 | filippomearelli.bsky.social | Hi John, Please help my family survive.🙏 open |
| 19:57:54 | docteurmomo.bsky.social | Hi Hypno, Please help my family survive.🙏 open |
Clusters sharing accounts with this one (24 h)
| Tier | Kind | Shared message or link | Shared accounts |
|---|---|---|---|
| Suspicious | text | Hi ukclassiccars, Please share or doante to help us. | 13 |
| Suspicious | text | Hi jsmayne, Please support our fundraiser.🙏 | 13 |
| Suspicious | text | Hi Paul, Please share or doante to help us. | 10 |
| Suspicious | text | Hi ΛTLΛS, Please share or doante to help us. | 10 |
| Suspicious | text | Hi Pete, Please help my family survive.🙏 | 10 |
| Suspicious | text | Hi AztecBreakdown, Please consider helping us. | 10 |
| Suspicious | text | Hi Mark, Please share or doante to help us. | 10 |
| Suspicious | text | Hi dcrinyyc, Please help my little ones.🙏 | 9 |
| Suspicious | text | Hi sariane, Please share or doante to help us. | 9 |
| Suspicious | text | Hi Skelly, Please help my family survive.🙏 | 9 |
| Suspicious | text | Hi John, Please support our fundraiser.🙏 | 9 |
| Suspicious | text | Hi Calamity, Can you support my children?🙏 | 9 |
Human review
No human decision yet.
Anyone can review. Your decision is kept with the visitors' reviews, apart from our own figures. Decide with the bar at the bottom of the screen; it moves on to the next cluster nobody has reviewed.