Astroturf Network Provenance Mapping - Cyprus Account Farm
Objective
Document the single authoring fingerprint linking ten thousand 'spontaneous' accounts to one coordinated campaign, without naming individual accounts.
Summary
A former content-mill contractor opened a whistleblower channel describing scripted campaign authoring run from a PR shell. Pattern Fabric provenance forensics confirmed an identical authoring fingerprint across the network's supposedly organic campaigns. Tracker mesh captured posting-burst telemetry without operational incident, protecting the source above all. The provenance brief was assembled and filed. Demote, don't deplatform — naming accounts invites a free-speech framing, so the amplification is collapsed quietly instead.
Operational Timeline
- T-5 dWhistleblower channel opened; source-handling protocol set.
- T-2 dTracker mesh samples posting-burst telemetry across the account network.
- T-0Pattern Fabric returns identical authoring fingerprint across 'spontaneous' campaigns.
- Day 4PR-shell billing matched to the account-farm infrastructure.
- Day 9Provenance brief filed; source extracted from exposure.
Findings
- Identical authoring fingerprint present across campaigns the network presented as organic.
- Coordinated posting bursts inconsistent with any human behaviour pattern.
- PR-shell invoices reconciled directly against account-farm hosting costs.
Outcome
Manufactured-consensus network mapped and filed; whistleblower source secured and relocated; amplification queued for quiet demotion.