Lead review
Suspicious score 65/100 · text cluster · 4 accounts · 5 posts
View in 3D: where it comes from and what it is linked to
Part of a campaign: FactsLens coordinated activity report — Bluesky templated solicitation network (40 clusters, 25 accounts), linked by Nemotron.
First seen Sat 14 Nov 10:07 UTC, last Sat 14 Nov 10:09 UTC.
Coordinated activity by accounts with several signs of being inauthentic.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Insufficient evidence confidence medium · recommended: human review
Four Bluesky accounts posted near-identical, personalised fundraiser appeals within two minutes, swapping only the recipient's name. No fundraiser details, link, organiser, cause, or amount were provided. All accounts have empty profiles, minimal followers, and most appear in other flagged clusters.
Narrative: A generic, personalised request asking an unnamed individual to support an unspecified fundraiser, with no verifiable details attached.
Strongest innocent explanation considered: Friends or supporters of one cause using a shared template to ask their individual contacts to support the same fundraiser, personalising only the greeting.
- Near-identical text across all four posts with only the name swapped (S:copy_paste = 100%, threshold 50%).
- 60% of activity occurred within a single minute and all four posts within two minutes (S:synchrony = 60%, threshold 50%).
- All accounts have empty profiles and fewer than 10 followers (S:empty_profiles = 100%, S:low_reach = 100%).
- 75% of accounts also appear in at least two other flagged clusters within 24 hours (S:cross_cluster = 75%, threshold 50%).
- No fundraiser link, organiser, cause, or amount is provided, making the appeal unverifiable.
- No grounded claim supports 'staged'.
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v5, Sat 10:12 UTC, 2 model calls, 41.9 s · 100% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S FactsLens signal.
Activity per minute
3 minutes, peak 2 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 100% | ≥ 50% | yes | 100% of posts repeat near-identical text from another account. |
| coordination | synchrony | 60% | ≥ 50% | yes | 60% of the activity happened within a single minute. |
| coordination | repetition | 1.25 | ≥ 2.0 | no | Each account posted this 1.2 times on average. |
| coordination | cross_cluster | 75% | ≥ 50% | yes | 75% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 25% | ≥ 40% | no | 25% of the accounts were created within the same 72 hours. |
| account | low_reach | 100% | ≥ 60% | yes | 100% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 100% | ≥ 50% | yes | 100% of the accounts have no profile picture or no bio. |
| account | template_bios | 0% | ≥ 30% | no | 0% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 0% | ≥ 30% | no | 0% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 0% | ≥ 50% | no | 0% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (4)
Median account age: 799 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; reviewers see all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| account 1 | 788 | 0 | 2 | 2 | active |
| account 2 | 804 | 1 | 1 | 1 | active |
| account 3 | 535 | 5 | 4 | 1 | active |
| account 4 | 799 | 9 | 11 | 1 | active |
Clusters sharing accounts with this one (24 h)
| Tier | Kind | Shared message or link | Shared accounts |
|---|---|---|---|
| Suspicious | text | Hi Hermine, Please support our fundraiser.🙏 | 4 |
| Suspicious | text | Hi Tracey, Please help my family survive.🙏 | 3 |
| Suspicious | text | Hi Claude, Please help my family survive.🙏 | 3 |
| Suspicious | text | Hi sane, Please share or doante to help us. | 3 |
| Suspicious | text | Hi Blue, Please help my family survive.🙏 | 3 |
| Suspicious | text | Hi Jason, Please share or doante to help us. | 3 |
| Suspicious | text | Hi ROC, Please share or doante to help us. | 3 |
| Suspicious | text | Hi Matt, Please support our fundraiser.🙏 | 2 |
| Suspicious | text | Hi Robert, Please share or doante to help us. | 2 |
| Suspicious | text | Hi Joe, Please share or doante to help us. | 2 |
| Suspicious | text | Hi Onikuno, Please share or doante to help us. | 2 |
| Suspicious | text | Hi atchill, Please help my little ones.🙏 | 2 |
Human review
No human decision yet.
Reviewers can record a decision; decisions feed the public metrics.