# entities

id: 61585153052901
type: page
name: لبنان يتحرر
url: https://www.facebook.com/people/لبنان-يتحرر/61585153052901/
platform: facebook
collected_at: 2026-03-17 16:40:53
notes:
  TARGET PAGE. Classic page ID: 913256835205251. ~2484 followers, ~55197 talking-about (22:1 anomalous). Category: Marketing agency. Anti-Hezbollah IO. CREATION: Dec 15 2025. NAME HISTORY: Created as 'لبنان يتحرر' → renamed 'مرحبا ريّس' same day (parking) → renamed back to 'لبنان يتحرر' Jan 29 2026 (operation activation). ADMINS: Bulgaria (2) + Russia (1). Running political/social ads. DISTINCT from سمن وعسل which has Palestine admins.

raw_json:
  {"target": {"profile_id": "61585153052901", "underlying_page_id": "913256835205251", "name_arabic": "\u0644\u0628\u0646\u0627\u0646 \u064a\u062a\u062d\u0631\u0631", "name_english": "Lebanon Liberates Itself", "location_stated": "Beirut, Lebanon", "category": "Marketing Agency", "likes": 1300, "followers": 2484, "talking_about": 55197, "reviews": 0, "profile_image_fbid": "623258551_122112658539171768", "cover_photo_fbid": "122113354911171768", "cover_album": "a.122097682887171768", "stories_id": "122100327477171768"}, "description_arabic": "\u0644\u0628\u0646\u0627\u0646 \u0645\u0634 \u0633\u0627\u062d\u0629 \u062d\u0631\u0648\u0628.\n\u0643\u0641\u0651\u0649 \u062a\u062f\u062e\u0644 \u0648\u0643\u0641\u0651\u0649 \u062e\u0631\u0627\u0628.\n\n\u062f\u0645\u0651\u0631\u062a\u0648\u0627 \u0627\u0644\u0628\u0644\u062f \u0648\u0633\u0631\u0642\u062a\u0648\u0627 \u0645\u0646\u0627 \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644.\n\u0644\u0628\u0646\u0627\u0646 \u0628\u062f\u0651\u0648 \u064a\u0631\u062c\u0639 \u062d\u0631\u0651\u060c \u0645\u0633\u062a\u0642\u0644\u060c \u0648\u0633\u064a\u0651\u062f \u0642\u0631\u0627\u0631\u0647.\n\n\u0627\u0634\u062a\u0642\u0646\u0651\u0627 \u0644\u0644\u0628\u0646\u0627\u0646 \u0623\u064a\u0651\u0627\u0645 \u0632\u0645\u0627\u0646.\n\u0622\u0646 \u0627\u0644\u0623\u0648\u0627\u0646 \u0646\u062a\u062d\u0631\u0651\u0631 \ud83c\uddf1\ud83c\udde7", "description_english_translation": "Lebanon is not a war arena.\nEnough interference and enough destruction.\n\nYou destroyed the country and stole our future.\nLebanon wants to return free, independent, and master of its own decisions.\n\nWe miss the Lebanon of old days.\nIt is time to liberate ourselves \ud83c\uddf1\ud83c\udde7", "red_flags": ["Category: Marketing Agency (not political/civic/media)", "Engagement ratio anomaly: 55K talking / 2.5K likes = 22:1 ratio (normal <5:1)", "No reviews despite high engagement", "New-format page ID suggests recent creation", "No cross-platform presence found (Telegram, Instagram, TikTok, YouTube)", "No Wayback Machine archives", "Generic Lebanese sovereignty rhetoric (emotional manipulation pattern)"], "observed_content": [{"post_id": "pfbid025fGFoMY1Df7hou988cpmCj4PbdwiEhNa1DbQZZ5DX18CFT2eE1QRNQTnpQFeFk3Hl", "age": "2 hours", "text_preview": "\u0646\u062d\u0646\u0627 \u0627\u0644\u064a\u0648\u0645 \u0628\u0627\u0644\u0634\u0627\u0631\u0639 \u0648\u062a\u062d\u062a \u0627\u0644\u0645\u0637\u0631 \u0628\u0628\u064a\u0631\u0648\u062a\u2026 \u0628\u0644\u0627 \u0628\u064a\u062a \u0648\u0628\u0644\u0627 \u0633\u0642\u0641. \u064a\u0627 \u062a\u0631\u0649 \u0627\u0644\u0634\u064a\u062e \u0646\u0640\u00d7\u0640\u064a\u0645 \u0648\u0643\u0644 \u0647\u0627\u0644\u0642\u064a\u0627\u062f\u0627\u062a \u0628\u064a\u0631\u0636\u0648\u0627 \u064a\u0634\u0648\u0641\u0648\u0627 \u0648\u0644\u0627\u062f\u0646 \u0639\u0627\u064a\u0634\u064a\u0646 \u0628\u062e\u064a\u0645\u0629 \u0645\u062a\u0644\u0646\u0627\u061f", "image_fbid": "122118914115171768", "engagement": {"likes": 13, "sad": 1, "comments": 1}}], "commenters_observed": [{"name": "Toni Abdallah", "username": "toni.abdallah.71", "comment": "\u0648\u0642\u062a \u0643\u0627\u0646 \u0627\u0644\u0633\u0648\u0631\u064a \u0643\u0645\u0627\u0646 \u0641\u064a \u0639\u0627\u0644\u0645 \u0646\u0632\u062d\u062a \u0648\u0644\u0627 \u0646\u0633\u064a\u062a\u0648\u0627"}]}


id: 100068562694592
type: profile
name: الهام ضيا (Elham Dhia)
url: https://www.facebook.com/profile.php?id=100068562694592
platform: facebook
collected_at: 2026-03-17 16:40:53
notes: {"id_format": "old (pre-2023)"}
raw_json:
  {"uid": "100068562694592", "name": "\u0627\u0644\u0647\u0627\u0645 \u0636\u064a\u0627 (Elham Dhia)", "id_format": "old (pre-2023)"}


id: 61579855714899
type: profile
name: Zolfekar Hjazi
url: https://www.facebook.com/profile.php?id=61579855714899
platform: facebook
collected_at: 2026-03-17 16:40:53
notes:
  {"id_format": "615xxx (post-2022)", "comment_on_post": "Unknown post (confirmed commenter on target page)", "current_city": null, "work": null, "creation_date": "Not found (sparse profile / privacy settings)", "name_analysis": {"first_name": "Zolfekar (\u0630\u0648 \u0627\u0644\u0641\u0642\u0627\u0631) = Dhu al-Faqar \u2014 name of Ali ibn Abi Talibs sword; distinctly Shia cultural name", "surname": "Hjazi \u2014 Hijazi, associated with Hijaz region (Saudi) or common Lebanese family name"}, "signals": ["Distinctly Shia name (Zulfiqar) is consistent with target pages intra-Shia dissent narrative", "Profile very sparse \u2014 no city, work, or creation date visible", "Could be authentic Lebanese Shia dissenter OR fabricated Shia-presenting account"]}

raw_json:
  {"id": "61579855714899", "name": "Zolfekar Hjazi", "id_format": "615xxx (post-2022)", "comment_on_post": "Unknown post (confirmed commenter on target page)", "current_city": null, "work": null, "creation_date": "Not found (sparse profile / privacy settings)", "name_analysis": {"first_name": "Zolfekar (\u0630\u0648 \u0627\u0644\u0641\u0642\u0627\u0631) = Dhu al-Faqar \u2014 name of Ali ibn Abi Talibs sword; distinctly Shia cultural name", "surname": "Hjazi \u2014 Hijazi, associated with Hijaz region (Saudi) or common Lebanese family name"}, "signals": ["Distinctly Shia name (Zulfiqar) is consistent with target pages intra-Shia dissent narrative", "Profile very sparse \u2014 no city, work, or creation date visible", "Could be authentic Lebanese Shia dissenter OR fabricated Shia-presenting account"]}


id: 100065678581703
type: page
name: سمن وعسل
url: https://www.facebook.com/profile.php?id=100065678581703
platform: facebook
country: Palestine
created_at: 2021-03-17
collected_at: 2026-03-17 16:40:53
notes:
  Cover asset. Page Transparency: Palestine (2 managers). Phone: +972 59-747-9787 (Palestinian). Employer listed by Ghaith Ali.

raw_json:
  {"entity": "\u0633\u0645\u0646 \u0648\u0639\u0633\u0644 (Ghee and Honey)", "facebook_id": "100065678581703", "alt_id": "532766142256001", "delegate_page": "108546837980492", "delegate_redirects_to": "100065678581703", "category": "Product/service", "subcategory": "Organic natural products \u2014 honey and ghee", "status_text": "Organic natural products- honey and ghee - \u0645\u0646\u062a\u062c\u0627\u062a \u0637\u0628\u064a\u0639\u064a\u0629 \u0639\u0636\u0648\u064a\u0629 - \u0639\u0633\u0644\u064a\u0651\u0627\u062a \u0648 \u0633\u0645\u0646 \u0628\u0644\u062f\u064a", "created": "2021-03-17T00:00:00Z", "creation_note": "Created March 17, 2021; this is the PUBLIC FACEBOOK PAGE creation date. Ghaith Ali profile (employer field) created Jan 4, 2026 \u2014 4+ years later.", "page_profile_updated": "2024-03-17T00:00:00Z", "followers": 937, "following": 1, "is_additional_profile_plus": true, "is_business_page_active": false, "contact_info": {"phone_primary": "+972 59-747-9787", "phone_country": "Palestine", "phone_note": "CRITICAL: +972 is Palestine country code; contradicts Ghaith Ali's 'South Lebanon' claimed location", "messenger_available": true}, "page_management": {"primary_country_location": "Palestine (2 managers listed)", "management_note": "Page administered from Palestine, not Lebanon"}, "cdn_node": "scontent-fra3", "cdn_note": "Frankfurt CDN node (viewer-side routing, not admin location signal)", "profile_photo_id": "413762970822986", "cover_photo_id": "413762974156319", "follows": [{"id": "100044623170419", "name": "\u0648\u062a\u064a\u0646 / Wateeen7", "manager": "Malak Almughrabi", "followers": 1600000}], "story_bucket_entity": "100610558804897", "connection_to_investigation": "Listed as employer by Ghaith Ali (61562211934692), who is a Day-1 commenter on target page", "linked_person": {"id": "61562211934692", "name": "Ghaith Ali", "role": "Listed employer", "current_city": "Abbassiy\u00e9, South Lebanon", "account_created": "2026-01-04T17:14:00Z"}, "osint_signals": ["Page created 2021-03-17; Ghaith employer field (this entity) added 2026-01-04 \u2014 4+ year gap", "Managed from Palestine (2 administrators) \u2014 contradicts Ghaith Ali's 'South Lebanon' location claim", "Contact phone: +972 Palestine code \u2014 GEOLOCATION MISMATCH with alleged operator location", "Small follower count (937) despite being operational for 5+ years \u2014 consistent with inactive/dormant entity", "Only follows 1 entity \u2014 Malak Almughrabi's memorial/inspirational page (Gaza-linked)", "Ghaith Ali (Day-1 target page commenter) claims this as employer created Jan 4, 2026", "Profile updated March 2024 (2 years ago) \u2014 appears to be pre-existing dormant entity repurposed for IO cover"]}


id: 100044623170419
type: page
name: وتين / Wateeen7
url: https://www.facebook.com/Wateeen7
platform: facebook
collected_at: 2026-03-17 16:40:53
notes: 1.6M followers. Managed by Malak Almughrabi (Palestinian/Gazan). سمن وعسل follows ONLY this page.
raw_json:
  {"entity": "\u0648\u062a\u064a\u0646 / Wateeen7", "facebook_id": "100044623170419", "username": "Wateeen7", "delegate_page": "1458901094353953", "category": "Writer", "followers": 1600000, "following": 157, "is_additional_profile_plus": true, "is_business_page_active": false, "instagram_linked": "malak.almughrabi", "current_manager": "Malak Almughrabi (Palestinian/Gazan content creator)", "original_owner": {"name": "\u0623\u0645\u062c\u062f \u0643\u0644\u0627\u0628 (Amjad Kulab)", "status": "Deceased \u2014 described as shahid (martyr)", "memorial_post": "\u0635\u064e\u062f\u064e\u0642\u064e\u0629 \u062c\u064e\u0627\u0631\u0650\u064a\u064e\u0629 \u0639\u064e\u0646 \u0631\u064f\u0648\u062d\u0650 \u0627\u0644\u0634\u0651\u0647\u064e\u064a\u0650\u062f \u0635\u0627\u062d\u0628 \u0627\u0644\u0635\u0641\u062d\u0629: \u0623\u064e\u0645\u062c\u0650\u062f \u0643\u064f\u0644\u0627\u0628"}, "bio": "\u0631\u064f\u063a\u0645 \u0631\u062d\u064a\u0644\u0643 \u0633\u062a\u0628\u0642\u0649 \u062f\u0648\u064f\u0645\u0627\u064b \u0642\u064f\u0631\u0628 \u0627\u0644\u0648\u062a\u064a\u0646 \u062e\u0644\u0641 \u0627\u0644\u0646\u0628\u0636\u0629 \u062a\u062d\u062a \u0638\u0644 \u0627\u0644\u0642\u0644", "bio_translation": "Despite your departure, you will always remain close to the Watin (aorta), behind the pulse, under the shadow of the [heart]", "content_focus": ["Islamic dhikr", "religious motivation", "personal reflections", "inspirational content"], "connection_to_investigation": "Followed by work entity '\u0633\u0645\u0646 \u0648\u0639\u0633\u0644' (100065678581703), which is Ghaith Ali's employer", "malak_almughrabi_facebook": "https://www.facebook.com/malak.almughrabi1/", "timestamps_found": ["2025-04-07", "2026-03-16"], "osint_notes": ["Page was originally owned by Amjad Kulab who died; now managed as memorial/active page by Malak Almughrabi", "1.6M followers indicates major Arabic social media presence", "Malak Almughrabi is associated with Gaza/Palestine", "Following this page is consistent with common Lebanese Arab social media behavior (popular inspirational pages)", "Does NOT by itself indicate political alignment with Hezbollah or Hamas"]}


id: mounetbeyti
type: page
name: mounetbeyti
url: https://www.facebook.com/mounetbeyti
platform: facebook
country: Lebanon
collected_at: 2026-03-17 16:40:53
notes:
  Lebanese entity. Phone 71 616 729. No structural connection to network confirmed. Treat as noise pending new link.

raw_json:
  {"entity": "mounetbeyti (My Home)", "entity_type": "Facebook Page", "facebook_url": "https://www.facebook.com/mounetbeyti", "discovered_context": "Additional Lebanese-located entity with phone contact; connection to investigation network unclear", "contact_info": {"phone": "71 616 729", "phone_country": "Lebanon", "phone_note": "Lebanese landline/mobile (71 = Beirut area code)"}, "collection_date": "2026-03-17T10:20:14Z", "status": "Pending verification and link analysis", "osint_notes": ["Lebanese phone number \u2014 contrasts with +972 Palestine number on \u0633\u0645\u0646 \u0648\u0639\u0633\u0644", "Suggests potential multi-jurisdiction network (Palestine admins + Lebanese fronts)", "Requires: page category, creation date, admin country, follower count, content analysis"]}


id: gform_1FAIpQLScXkARgCBHAZQ8Bu0O
type: domain
name: Unknown Google Form (sign-in restricted)
url: https://docs.google.com/forms/d/e/1FAIpQLScXkARgCBHAZQ8Bu0O_g1rWyz-G-5Y-qdUBmWbUve27piKeDA/viewform
platform: google_forms
collected_at: 2026-03-17 20:26:51
notes:
  CIVILIAN INFORMANT RECRUITMENT FORM. Embedded on target FB page. Collects: event description + location (required) + media up to 100MB x5. Google sign-in = email harvested. Backend = private Google Sheet. ACTIVE HUMINT COLLECTION against Hezbollah.

raw_json:
  {"form_id": "1FAIpQLScXkARgCBHAZQ8Bu0O_g1rWyz-G-5Y-qdUBmWbUve27piKeDA", "short_url": "https://forms.gle/NWKZhXdnfzGFx1ae9", "source_page": "61585153052901 (\u0644\u0628\u0646\u0627\u0646 \u064a\u062a\u062d\u0631\u0631)", "form_fields": [{"field": "\u0648\u0635\u0641 \u0627\u0644\u062d\u062f\u062b", "en": "Description of event", "required": true}, {"field": "\u0627\u0644\u0645\u0643\u0627\u0646", "en": "Location", "required": true}, {"field": "media", "en": "Photo/video if available", "max_files": 5, "max_mb": 100}], "arabic_body": "\u0644\u0628\u0646\u0627\u0646 \u0644\u0627\u0632\u0645 \u064a\u0643\u0648\u0646 \u0628\u0644\u062f \u0633\u064a\u0627\u062f\u0629 \u0648\u0642\u0627\u0646\u0648\u0646. \u0623\u064a \u0646\u0634\u0627\u0637 \u0639\u0633\u0643\u0631\u064a \u0623\u0648 \u0623\u0645\u0646\u064a \u0645\u0631\u062a\u0628\u0637 \u0628\u0642\u0648\u0649 \u062e\u0627\u0631\u062c\u064a\u0629 \u0628\u064a\u0647\u062f\u062f \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0627\u0644\u0628\u0644\u062f \u0648\u0623\u0645\u0646 \u0627\u0644\u0646\u0627\u0633. \u0645\u0646 \u062e\u0644\u0627\u0644 \u0647\u0627\u0644\u062d\u0645\u0644\u0629\u060c \u0627\u0644\u0645\u0648\u0627\u0637\u0646 \u0641\u064a\u0648 \u064a\u0628\u0644\u063a \u0639\u0646 \u0623\u064a \u0646\u0634\u0627\u0637 \u0645\u0634\u0628\u0648\u0647 \u0628\u0637\u0631\u064a\u0642\u0629 \u0622\u0645\u0646\u0629 \u0648\u0633\u0631\u064a\u0629", "target": "Hezbollah/Iranian activity ('foreign forces')", "sign_in_collects_email": true, "backend": "Private Google Sheet", "exif_risk": true, "date_accessed": "2026-03-17"}


id: ig_alnakoranews
type: profile
name: alnakoranews
url: https://www.instagram.com/alnakoranews/
platform: instagram
country: Iran
collected_at: 2026-03-17 21:33:07
notes:
  Instagram account. Joined September 2024. Account based in IRAN (Meta-verified). Found via hashtag used in target FB page ad (#لبنان_يتحرر or #حزب_الحرس_الثوري or #لبنان_لا_يريد_الحرب). Name: al-Naqoura (الناقورة) = South Lebanon coastal town, site of UNIFIL HQ, Israeli-Lebanese border area. SIGNIFICANCE: Iran-based account using anti-Hezbollah hashtags from the same operation is anomalous — possible Iranian opposition layer, Iranian counter-intel monitoring, or MKO/MEK-adjacent asset. Pre-dates target FB page by ~15 months.


id: 61559003090611
type: page
name: أخبار الناقورة (Al-Naqoura News / AlnakoraNews)
url: https://www.facebook.com/AlnakoraNews/
platform: facebook
collected_at: 2026-03-17 22:59:50
notes:
  8.9K followers, 2 following (Beirut City + Malak Mohsen). Category: News & media website. Address: En Nâqoûra, Lebanon 6858 (geocoded to Lebanon, Indiana USA - OPSEC error). Contact: IG @alnakoranews, X @alnakoraNews, WhatsApp أخبار الناقورة. Content: anti-Hezbollah, anti-IRGC, IDF evacuation warnings published. Branding: AL-NAQOURA NEWS watermark with Fox-style icon. AI-generated logo (cedar+microphones). Reels 130-147K views. Check-ins from May 2024 in South Lebanon (Naqoura, Tyre, Ras al-Ain). Linked Instagram account based in Iran per Meta.


id: 61551747917068
type: profile
name: Malak Mohsen
url: https://www.facebook.com/MohsenMalak2
platform: facebook
collected_at: 2026-03-17 22:59:50
notes:
  5.4K followers, 17 following. Digital creator. Location: Naqoura. Bio contains AlnakoraNews page URL (profile.php?id=61559003090611) - confirms ownership/admin. Check-ins: Naqoura Apr 21 2024, South Lebanon Apr 30, Sidon Jun 26, Lebanon Jul 7. Friends list private. No education/work/hometown. Profile photo: woman in hijab+sunglasses in European setting. Reel shows male figure - gender inconsistency. Tagged in Diamond Agency domestic worker posts (WhatsApp 0538813860). Minimal persona build.


id: alnakoranews_x
type: profile
name: alnakoraNews (X/Twitter)
url: https://x.com/alnakoraNews
platform: twitter
collected_at: 2026-03-17 23:00:04
notes:
  X/Twitter @alnakoraNews. Joined Sep 2024. 1,150 posts, 11 followers, 7 following. Location: En Nâqoûra, Lebanon. Bio identical to FB page. Links back to facebook.com/AlnakoraNews/. First visible post Dec 17, 2025. Following: X, BBCNews, googlechrome, YouTube, Microsoft, gmail, Spotify — ALL major tech brands, zero Lebanese/Arabic follows = factory account pattern. CRITICAL: Followers include Adam Milstein (Israeli-American pro-Israel activist/philanthropist, verified), Milstein Family Foundation, Israelforever23 (pro-Israel advocacy), yair_kraus (יאיר קראוס - Yedioth Ahronoth journalist covering Galilee/Golan, verified Israeli journalist). Multiple random-number-suffix accounts (bot/sock pattern). This follower composition is HIGHLY DIAGNOSTIC for Israeli IO attribution.


id: alnakoranews_threads
type: profile
name: alnakoranews (Threads)
url: https://www.threads.com/@alnakoranews
platform: threads
collected_at: 2026-03-17 23:02:08
notes:
  355 followers. Last post Oct 15, 2025 (dormant 5 months). Same hashtags as X (#لبنان #بيروت #لبنان_الجديد etc). Content more neutral Lebanese news vs anti-Hezbollah on FB. Links to FB and IG. Operator deprioritized Threads (low traction) to focus on FB (8.9K).


id: x_AdamMilstein
type: profile
name: Adam Milstein
url: https://x.com/AdamMilstein
platform: twitter
country: Israel/USA
collected_at: 2026-03-17 23:03:57
notes:
  Verified. Israeli-American activist/philanthropist. 193K followers, 67.6K following. Joined Nov 2009. #AmIsraelChai. @milsteinff. AIPAC, IAC. Mass-follows pro-Israel content (67K+ follows), so his following AlnakoraNews is part of broad pattern — less diagnostic than initially assessed. Reposted @IsraeliPM Netanyahu. Follows LauraLoomer, joekent16jan19, TulsiGabbard. Still: 4/11 Israeli followers on a tiny Lebanese account = statistically significant regardless of Milstein individual behavior.


id: x_yair_kraus
type: profile
name: יאיר קראוס (Yair Kraus)
url: https://x.com/yair_kraus
platform: twitter
country: Israel
collected_at: 2026-03-17 23:03:57
notes:
  Verified Israeli journalist. Yedioth Ahronoth/YNET. Covers Galilee & Golan (northern border). Telegram: t.me/yairkraus_real. 19.1K followers, ONLY 769 following (VERY selective). Joined Mar 2014. Recent posts: interviewed Defense Minister Israel Katz about preventing S. Lebanon displaced return until Hezbollah eliminated; reporting from Nahariya destruction; Kiryat Shmona healthcare crisis. His beat is the EXACT Israeli side of the border from Naqoura. With only 769 follows, his following @alnakoraNews is HIGHLY DELIBERATE — confirms professional Israeli security establishment awareness of the AlnakoraNews IO asset.


id: diamond_agency_053
type: phone
name: Diamond Agency (domestic workers)
platform: whatsapp
country: Israel
collected_at: 2026-03-17 23:08:38
notes:
  WhatsApp 0538813860 — 053 prefix = Israeli mobile (Hot Mobile carrier). Tagged in Malak Mohsen (MohsenMalak2) Facebook photos. Diamond Agency appears to be a domestic worker placement agency. Israeli phone on an entity connected to the AlnakoraNews admin persona adds another Israeli infrastructure link.


# content

id: ad_0
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1595585145041120", "status": "inactive", "dates": "Mar 11 - Mar 13, 2026", "audience": ">1M", "spent_usd": "<$100", "impressions": "25K - 30K", "siep_violation": true, "disclaimer_missing": true, "removed_by_meta": true, "platforms": ["Facebook", "Instagram"]}


id: ad_1
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1252561086402836", "status": "inactive", "dates": "Mar 14 - Mar 15, 2026", "active_time": "5 hours", "audience": ">1M", "spent_usd": "<$100", "impressions": "15K - 20K", "siep_violation": true, "disclaimer_missing": true}


id: ad_2
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1278104434217440", "status": "inactive", "dates": "Mar 12, 2026", "active_time": "3 hours", "audience": ">1M", "spent_usd": "<$100", "impressions": "100 - 999", "content": "\u0643\u0644 \u0627\u0644\u0644\u0628\u0646\u0627\u0646\u064a\u064a\u0646 \u0648\u0627\u0644\u0634\u064a\u0639\u0629 \u0645\u0646 \u0636\u0645\u0646\u0646 \u0628\u064a\u0633\u062a\u062d\u0642\u0648 \u064a\u0639\u064a\u0634\u0648 \u062d\u064a\u0627\u0629 \u0637\u0628\u064a\u0639\u064a\u0629 \u0628\u0642\u0627!"}


id: ad_3
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1449145340327278", "status": "active", "start_date": "Mar 13, 2026", "content": "\u0627\u0644\u0639\u0645\u0627\u062f \u0641\u0627\u062f\u064a \u0643\u0641\u0648\u0631\u064a \u064a\u0645\u062b\u0644\u0646\u064a!! #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631 #\u0627\u0644\u0634\u064a\u0639\u0629_\u062a\u0646\u062a\u0641\u0636 #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628 #\u062d\u0632\u0628_\u0627\u0644\u062d\u0631\u0633_\u0627\u0644\u062b\u0648\u0631\u064a #\u0627\u0644\u0639\u0645\u0627\u062f_\u0641\u0627\u062f\u064a_\u0643\u0641\u0648\u0631\u064a"}


id: ad_4
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "728857846861911", "status": "active", "start_date": "Mar 13, 2026", "content": "\u0627\u0644\u0633\u0627\u0639\u0629 \u0622\u062a\u064a\u0629 \u0644\u0627 \u0645\u062d\u0627\u0644\u0629!! #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628 #\u0644\u0628\u0646\u0627\u0646_\u0644\u0644\u0628\u0646\u0627\u0646\u064a\u064a\u0646 #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631", "type": "video", "video_duration": "0:16"}


id: ad_6
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "957748356769476", "status": "active", "start_date": "Mar 15, 2026", "active_time": "21 hours", "content": "\u0644\u0628\u0646\u0627\u0646 \u062d\u0631 \u0623\u0648 \u0645\u0627 \u0628\u064a\u0643\u0648\u0646!! #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631 #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628 #\u0644\u0628\u0646\u0627\u0646"}


id: ad_7
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "965526479367320", "status": "active", "start_date": "Mar 15, 2026", "active_time": "23 hours", "content": "\u0634\u0648 \u0631\u0627\u064a\u0643\u0646\u061f\u061f \u0627\u0643\u062a\u0628\u0648 \u0628\u0627\u0644\u062a\u0639\u0644\u064a\u0642\u0627\u062a #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631 #\u062d\u0632\u0628_\u0627\u0644\u062d\u0631\u0633_\u0627\u0644\u062b\u0648\u0631\u064a #\u0627\u0644\u0634\u064a\u0639\u0629_\u062a\u0646\u062a\u0641\u0636 #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628"}


id: ad_8
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1453678793011666", "status": "active", "start_date": "Mar 15, 2026", "active_time": "21 hours", "content": "\u0644\u0628\u0646\u0627\u0646 \u064a\u062a\u062d\u0631\u0631! #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631 #\u062d\u0632\u0628_\u0627\u0644\u062d\u0631\u0633_\u0627\u0644\u062b\u0648\u0631\u064a #\u0627\u0644\u0634\u064a\u0639\u0629_\u062a\u0646\u062a\u0641\u0636 #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628"}


id: ad_9
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "770154145889989", "status": "active", "start_date": "Mar 15, 2026", "active_time": "23 hours", "siep_violation": true, "disclaimer_missing": true, "audience": ">1M", "spent_usd": "<$100", "impressions": "5K - 6K"}


id: ad_10
entity_id: 61585153052901
type: ad
collected_at: 2026-03-17 16:40:53
raw_json:
  {"library_id": "1554590432504941", "status": "active", "start_date": "Mar 16, 2026", "active_time": "4 hours", "siep_violation": true, "disclaimer_missing": true, "content": "\u0642\u0627\u0639\u062f\u064a\u0646 \u0628\u0627\u0644\u0623\u0648\u062a\u064a\u0644\u0627\u062a \u0648\u0627\u0644\u0646\u0627\u0633 \u0628\u0631\u0627 \u0628\u0627\u0644\u0634\u0648\u0627\u0631\u0639.. \u0628\u0631\u062f \u0648\u062c\u0648\u0639 \u0648\u0628\u0647\u062f\u0644\u0629.. \u0628\u064a\u0646\u0634\u062f \u0627\u0644\u0638\u0647\u0631 \u0641\u064a\u0643\u0646 \u0648\u0627\u0644\u0644\u0647 #\u0644\u0628\u0646\u0627\u0646_\u064a\u062a\u062d\u0631\u0631 #\u062d\u0632\u0628_\u0627\u0644\u062d\u0631\u0633_\u0627\u0644\u062b\u0648\u0631\u064a #\u0644\u0628\u0646\u0627\u0646_\u0644\u0627_\u064a\u0631\u064a\u062f_\u0627\u0644\u062d\u0631\u0628"}


# relationships

source_id: 61585153052901
target_id: gform_1FAIpQLScXkARgCBHAZQ8Bu0O
type: linked_to
collected_at: 2026-03-17 20:30:32
evidence:
  Google Form embedded/linked on target FB page — confirmed by user 2026-03-17. Form body visible without auth.


source_id: 61559003090611
target_id: 61551747917068
type: admin_persona
collected_at: 2026-03-17 23:00:04
evidence:
  Malak Mohsen bio links to AlnakoraNews page ID. Check-in locations overlap. Profile created to manage page.


source_id: x_AdamMilstein
target_id: alnakoranews_x
type: follows
collected_at: 2026-03-17 23:03:57
evidence:
  Adam Milstein follows @alnakoraNews on X. Among only 11 followers. CRITICAL Israeli attribution signal.


source_id: x_yair_kraus
target_id: alnakoranews_x
type: follows
collected_at: 2026-03-17 23:03:57
evidence:
  Israeli journalist Yair Kraus (Yedioth/YNET, Galilee/Golan beat) follows @alnakoraNews. Diagnostic link.


source_id: diamond_agency_053
target_id: 61551747917068
type: tagged_on
collected_at: 2026-03-17 23:08:38
evidence:
  Diamond Agency posts tagged Malak Mohsen profile on Facebook. Agency uses Israeli mobile 0538813860.


source_id: alnakoranews_fb
target_id: target_page
type: same_operator
collected_at: 2026-03-17 23:15:59
evidence:
  Both pages share Bulgaria+Russia admin locations per Meta Page Transparency. AlnakoraNews: BG(1)+LB(1)+RU(1). Target: BG(2)+RU(1).


# identifiers

entity_id: 100065678581703
type: phone
value: +972597479787
country_code: PS
collected_at: 2026-03-17 16:40:53
lookup_result:
  {"carrier": "Palestinian mobile", "prefix": "+972 59", "notes": "Not Lebanese \u2014 contradicts Ghaith Ali South Lebanon claim"}


# annotations

ref_type: entity
ref_id: 61562211934692
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  CRITICAL HUB — only entity bridging Palestinian infrastructure to Lebanese IO page. Created Jan 4 2026, 30 days before first post.


ref_type: entity
ref_id: 100065678581703
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  Cover asset. Page Transparency confirms Palestine (2 managers) — Meta-verified. Creation date 2021-03-17 (5 years old, repurposed ~Jan 2026).


ref_type: entity
ref_id: 61585153052901
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  TARGET PAGE. 22:1 talking-about/followers ratio = definitively inauthentic. A/B ad testing pattern. SIEP violations.


ref_type: entity
ref_id: 100044623170419
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  Wateeen7 — Palestinian/Gazan managed mega-page. سمن وعسل single-follows this. Possible shared operator network.


ref_type: entity
ref_id: 61577225957303
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  Hussan Chhab — Day-1 commenter, 615xx ID, About page empty. Suspected factory batch with Ghaith Ali.


ref_type: entity
ref_id: 61579855714899
analyst: llm
created_at: 2026-03-17 16:40:53
note:
  Zolfekar Hjazi — Day-1 commenter, 615xx ID, Shia-coded name (Dhu al-Faqar). About page empty. Suspected factory batch.


ref_type: entity
ref_id: gform_1FAIpQLScXkARgCBHAZQ8Bu0O
analyst: forensic_pass_20260317
created_at: 2026-03-17 20:26:51
note:
  OPSEC LEAK: Sign-in restricted Google Form with Google Sheet backend. If URL appeared in FB post/comment from target network, operators exposed internal infrastructure. 'send_form' UTM = shared via Google Forms Share dialog (internal distribution, not broadcast). Arabic UI locale consistent with Arabic-speaking operator. To access: need Google account in operator's allowlist. Next: find which Google account owns this form.


ref_type: entity
ref_id: gform_1FAIpQLScXkARgCBHAZQ8Bu0O
analyst: forensic_pass_20260317
created_at: 2026-03-17 20:30:32
note:
  CRITICAL: THIS IS AN ACTIVE HUMINT COLLECTION OPERATION. FB page is a cover asset for recruiting civilian informants against Hezbollah. Form collects location + media (tactical intelligence). Google sign-in harvests informant identities. 'Safe and confidential' framing is misleading — email captured. Attribution: civilian HUMINT networks targeting Hezbollah operated by Israeli intel (Mossad/AMAN), Saudi GIP, or funded Lebanese opposition. Palestinian admins + +972 phone now consistent with Palestinian-Israeli intelligence collaboration.


ref_type: entity
ref_id: 61585153052901
analyst: analyst
created_at: 2026-03-17 21:01:08
note:
  PAGE TRANSPARENCY CONFIRMED (2026-03-17): Target page admin countries = Bulgaria (2) + Russia (1). NOT Palestine. Palestine admins are for سمن وعسل (cover entity), a SEPARATE page. Name history: Created Dec 15 2025 as لبنان يتحرر → renamed same day to مرحبا ريّس (45-day parking) → renamed back Jan 29 2026 for operational activation. Category: Marketing agency. Currently running political/social issue ads. Name-cycling is professional OPSEC tradecraft.


ref_type: entity
ref_id: 61585153052901
analyst: analyst
created_at: 2026-03-17 21:03:07
note:
  CRITICAL ATTRIBUTION REVISION: Admin countries Bulgaria (2) + Russia (1) for target page. This is the operational admin layer. Possible interpretations: (1) Eastern European commercial IO shop hired by unknown client; (2) Russian state-adjacent operation destabilizing Lebanon by weakening Hezbollah; (3) VPN laundering through Bulgaria/Russia masking true operator location. Bulgaria = NATO member, known click-farm/IO contractor hub. Russia = Syria/Lebanon interests, anti-Hezbollah narrative serves Moscow post-Syria. Combined with سمن وعسل Palestine layer = multi-layer contractor structure: Russian/Bulgarian operators executing, Palestinian cover assets, unknown state client directing.


ref_type: entity
ref_id: 61585153052901
analyst: analyst
created_at: 2026-03-17 21:25:48
note:
  LIVE AD CONFIRMED: Library ID 1554590432504941. Status: ACTIVE. Started 2026-03-16 (yesterday). Platforms: Facebook + Instagram. Copy: "قاعدين بالأوتيلات والناس برا بالشوارع.. برد وجوع وبهدلة.. بينشد الظهر فيكن والله" + hashtags #لبنان_يتحرر #حزب_الحرس_الثوري #لبنان_لا_يريد_الحرب. SIGNIFICANCE: (1) Instagram placement = parallel Instagram account likely exists; (2) Started day after our investigation = may be new ad account after previous was disabled for 4+ SIEP violations; (3) Hashtag حزب_الحرس_الثوري = specific Israeli/US/Gulf delegitimization label for Hezbollah; (4) Messaging targets post-war displaced Lebanese (hotels vs streets) = recruitment funnel for HUMINT Google Form.


ref_type: entity
ref_id: ig_alnakoranews
analyst: analyst
created_at: 2026-03-17 21:33:07
note:
  CONTENT CONFIRMED: Only anti-Hezbollah/anti-IRGC + attacks Lebanese Army (LAF) commanders. THIS COMBINATION IS DIAGNOSTIC. Standard Lebanese opposition (March 14, LF, Future) supports LAF as counter to Hezbollah — they do NOT attack LAF commanders. Only actors who target BOTH Hezbollah AND Lebanese Army: (1) Israeli intelligence — has formally accused LAF of Hezbollah coordination, targeted LAF in 2024 conflict, pressures LAF via IO to enforce 1701; (2) radical Salafi/Takfiri — enemies of all state armies, but not Iran-based. Iranian state (MOIS/IRGC) would NEVER attack Lebanese Army — LAF is a client relationship. MEK would not target LAF specifically. CONCLUSION: Iranian IP is almost certainly deliberate FALSE FLAG. Real operator is likely Israeli or Saudi intelligence using Iranian VPN/VPS to muddy attribution. Levantine Arabic + LAF targeting + Iranian IP = Israeli intelligence signature at 80%+ confidence. This is likely the Instagram amplification layer of the same operation as the FB page.


ref_type: entity
ref_id: ig_alnakoranews
analyst: analyst
created_at: 2026-03-17 21:40:49
note:
  NEW DIMENSION: LAF commander attacks reveal the operation scope extends beyond anti-Hezbollah to anti-Lebanese-state-institutions. This is a destabilization-plus-HUMINT operation: (1) Delegitimize Hezbollah as Iranian proxy; (2) Delegitimize Lebanese Army as Hezbollah-complicit; (3) Recruit civilian informants via Google Form. Full objective: strip Lebanese state of legitimacy, create informant network, harvest tactical intelligence. This is not a simple IO campaign — it is a comprehensive intelligence preparation of the battlespace (IPB) operation.


ref_type: entity
ref_id: 61585153052901
analyst: raw_source
created_at: 2026-03-17 21:52:15
note:
  VERBATIM PAGE TRANSPARENCY (captured 2026-03-17): "Page transparency — لبنان مش ساحة حروب. كفّى تدخل وكفّى خراب. دمّرتوا البلد وسرقتوا منا المستقبل. لبنان بدّو يرجع حرّ، مستقل، وسيّد قراره. اشتقنّا للبنان أيّام زمان. آن الأوان نتحرّر 🇱🇧 | Pages and accounts | ID: 913256835205251 | 2.5K followers | Marketing agency | Page history: Merged with 0 other Pages | Page name changed 3 times | Page created on 15 Dec 2025 | Organisations that manage this Page: [EMPTY — no organisation listed] | People who manage this Page: Primary country location for people who manage this Page includes: Bulgaria (2) Russia (1)"


ref_type: entity
ref_id: 61585153052901
analyst: analyst
created_at: 2026-03-17 21:52:15
note:
  CORRECTION: Page name changed 3 times (not 2 as previously recorded). Known sequence from earlier history capture: (1) Created as لبنان يتحرر Dec 15 2025 → (2) Changed to مرحبا ريّس Dec 15 2025 → (3) Changed to لبنان يتحرر Jan 29 2026 → (4) second Jan 29 entry possibly a display artifact OR a 4th event. Page Transparency summary says "3 times" — the two Jan 29 entries likely represent one real rename event displayed twice, OR there was a third intermediate name not captured. OPEN QUESTION: what was the 3rd distinct name?


ref_type: entity
ref_id: 61585153052901
analyst: raw_source
created_at: 2026-03-17 21:52:15
note:
  VERBATIM ADS LIBRARY (captured 2026-03-17): Library ID: 1554590432504941 | Status: Active | Started running on 16 Mar 2026 | Platforms: Facebook + Instagram | Ad copy: "قاعدين بالأوتيلات والناس برا بالشوارع.. برد وجوع وبهدلة.. بينشد الظهر فيكن والله" | Hashtags: #لبنان_يتحرر #حزب_الحرس_الثوري #لبنان_لا_يريد_الحرب | About the advertiser: لبنان يتحرر | ID: 913256835205251 | 2.5K followers | Marketing agency | Description: "لبنان مش ساحة حروب. كفّى تدخل وكفّى خراب. دمّرتوا البلد وسرقتوا منا المستقبل. لبنان بدّو يرجع حرّ، مستقل، وسيّد قراره. اشتقنّا للبنان أيّام زمان. آن الأوان نتحرّر 🇱🇧" | Paid for by: [NOT DISCLOSED — page name only, no verified business entity]


ref_type: entity
ref_id: 61585153052901
analyst: analyst
created_at: 2026-03-17 21:52:15
note:
  SIGNIFICANT: "Organisations that manage this Page" field is EMPTY in Page Transparency. This means no Meta Business Manager (verified organisation) is linked to the page. Operators are running via personal ad accounts, not a registered business entity. This is consistent with: (1) repeated SIEP violations — business-verified advertisers rarely make this mistake repeatedly; (2) Bulgarian shell company either not registered with Meta or used a different unlinked account; (3) the new ad (started Mar 16) was launched from a fresh personal account after previous BM was penalised. Absence of organisation is itself operational signal — professional IO shops sometimes deliberately avoid BM registration to reduce paper trail.


ref_type: entity
ref_id: ig_alnakoranews
analyst: raw_source
created_at: 2026-03-17 21:52:15
note:
  CONTENT CONFIRMED BY USER (2026-03-17): Posts exclusively in Levantine Arabic dialect. Content: anti-Hezbollah, anti-IRGC, AND attacks on Lebanese Army (LAF) commanders specifically. Does NOT post anti-Israel content. Instagram About this account: Date joined September 2024, Account based in Iran.


ref_type: entity
ref_id: alnakoranews_x
analyst: analyst
created_at: 2026-03-17 23:05:24
note:
  CRITICAL: X/Twitter followers of @alnakoraNews (only 11 total) include Adam Milstein (Israeli-American mega-donor, AIPAC, IAC), Milstein Family Foundation, Yair Kraus (Israeli journalist Yedioth Ahronoth/YNET, covers Galilee & Golan border), and Israel2023 (pro-Israel advocacy). 4 of 11 followers are explicitly Israeli/pro-Israel. Statistical probability of this occurring organically on a Lebanese news page with 11 followers: near zero. This is the strongest direct Israeli attribution signal in the investigation.


ref_type: entity
ref_id: x_AdamMilstein
analyst: analyst
created_at: 2026-03-17 23:05:24
note:
  Adam Milstein: Israeli-born American philanthropist, AIPAC board, Israeli American Council co-founder. Known for funding pro-Israel advocacy and combating BDS. Net worth 100M+. His personal X account following a tiny 11-follower Lebanese anti-Hezbollah account strongly suggests either: (a) He or his network sponsors this IO, (b) He was added to an IO distribution/seeding list, or (c) algorithmic recommendation — least likely given account size.


ref_type: entity
ref_id: x_yair_kraus
analyst: analyst
created_at: 2026-03-17 23:05:24
note:
  Yair Kraus: Israeli journalist at Yedioth Ahronoth/YNET covering the Galilee and Golan (Israel northern border). His Telegram: t.me/yairkraus_real. Following a tiny anti-Hezbollah Lebanese IO account suggests: (a) he monitors IO assets as part of his beat, (b) he was provided access as an Israeli journalist covering the northern front, or (c) he is part of an information ecosystem around the IO. His beat area directly borders the Naqoura/South Lebanon focus of AlnakoraNews.


ref_type: entity
ref_id: 61559003090611
analyst: analyst
created_at: 2026-03-17 23:05:24
note:
  AlnakoraNews cross-platform presence: FB (8.9K followers), IG (Iran-based per Meta, Sep 2024), X/Twitter (1,150 posts/11 followers, Sep 2024), Threads (@alnakoranews). X following list: only major tech brands (X, BBCNews, Chrome, YouTube, Microsoft, Gmail, Spotify) = factory account. Key X followers: Adam Milstein, Milstein FF, Yair Kraus (Yedioth), Israel2023 — all Israeli-linked. Page admin persona Malak Mohsen (ID 61551747917068) bio links directly to page. Publishes IDF evacuation warnings. Address geocoded to Lebanon Indiana (OPSEC error). This is a multi-platform Israeli-linked IO asset targeting South Lebanon.


ref_type: entity
ref_id: diamond_agency_053
analyst: analyst
created_at: 2026-03-17 23:08:38
note:
  Diamond Agency WhatsApp 0538813860: Israeli mobile number (053 = Hot Mobile). This domestic worker agency tagged Malak Mohsen (AlnakoraNews admin persona) in Facebook posts. The Israeli phone link adds to the Israeli infrastructure cluster: Milstein followers, Yair Kraus, IDF warnings, now Israeli phone on agency connected to admin persona.


ref_type: entity
ref_id: alnakoranews_fb
analyst: analyst
created_at: 2026-03-17 23:15:59
note:
  PAGE TRANSPARENCY: Created 22 Apr 2024. Admins BG(1)+LB(1)+RU(1). Classic ID 304555486069328. Running ads. Matches target page BG+RU admins.


