SophiaMusik and Unanimous promote Salvator Mundi — four months before the $450M auction

The Aug 11, 2017 overlap above was not the only one that summer. Across his own channel and his “sister” channel Unanimous, Schoenberger ran a coordinated promotion of Leonardo da Vinci’s Salvator Mundi — the painting Christie’s would auction on November 15, 2017 for $450.3 million, the highest price ever paid for a painting at auction.

Jul 9, 2017 · Sophia Musik channel. Schoenberger uploads “{Three Roses} Leonardo da Vinci” (20,465 views at capture). The description opens, in his own words: “Video created by Unanimous, Sophia Musik’s family of sisters.” — his own channel confirming Unanimous is a sibling of his, not an independent group. Credits: music by SophiaMusik; vocals by Marnie Breckenridge; and “Custodian of the Salvator Mundi: Robert Simon Fine Art” with a direct link to robertsimonfineartleonardo.blogspot.com — the actual blog of the art dealer who, with Alex Parish, had bought the painting at a 2005 estate sale for about $1,175 and was by 2017 attempting to validate it as a lost Leonardo.

c. 2016–2017 · Unanimous channel. A video titled “Unanimous – Savior of the World” (314 subscribers, 1,838 views at capture) runs the same material — same Leonardo quote, same Robert Simon credit, same linked blog. The channel signs off: “Unanimous – The Feminine Aspect of Anonymous.” That the two channels are the same operator is already established by the Three Roses description above.

The painting itself (image rights © 2011 Salvator Mundi LLC via Robert Simon Fine Art):

What the public record says about the painting: Simon and Parish bought it in 2005 for roughly $1,175; it was attributed to Leonardo for a 2011 National Gallery London exhibition; sold to Dmitry Rybolovlev in 2013 for $127.5 million; sold at Christie’s November 15, 2017 for $450.3 million, with the New York Times and Wall Street Journal later identifying the buyer as Prince Bader bin Abdullah on behalf of Mohammed bin Salman. The Louvre declined to display it as a Leonardo in its 2019 exhibition. Attribution remains contested in the art-historical literature. The painting has not been publicly shown since.

What Schoenberger’s circle added to that public story: the claim that Salvator Mundi is the key to Liber Primus — the ~60-page book of runes released at the end of the 2014 Cicada 3301 puzzle, which has never been solved. The move is characteristic: borrow authority from a real art-market story, bolt a Cicada “the-game-is-still-on” cliffhanger onto it, and let the audience do the math.

Fright Knight — the distribution channel for the same script. A video on the Fright Knight YouTube channel (youtube.com/watch?v=NV4dE7W0ljA) runs the entire Schoenberger script almost verbatim: Da Vinci coded his paintings; Salvator Mundi’s optically-wrong orb is a deliberate three-dimensional cipher; “pages 7, 23, 33, and 56 have dots. Overlay the constellation of the dots, and you will receive your three-dimensional cipher”; Cicada “will not accept new recruits until Liber Primus is solved.”

That channel wasn’t talking about Schoenberger — it was being fed by him, in writing, from 2018:

• May 5, 2018 · subject “Hi Fright.” Thomas (tstger13@gmail.com) emails Frightknight@protonmail.com directly, with Michael Levine (quantumw@gmail.com, his Cicada-trademark co-holder) and me on the thread: “We are no longer associated with Defa[n]go. We wish him good luck in his endeavors. Thanks Thomas.” He is writing to the channel by name as if to a known collaborator.
• Dec 25, 2018. On a group thread with Thomas, PistisSophia (Clapier), Levine, Jafair, Mindy, me and others, juno3313@protonmail.ch complains about a video of his being redistributed without permission: “After seeing it public on Defango stream and on Fright Knight Channel why I can’t have my creation on my channel?” Fright Knight is treated inside the circle as one of the places their material appears.

Both items are in my inbox. Together they predate the 2026 Salvator Mundi script video by eight years and establish Fright Knight as a venue Thomas emailed and the circle treated as a distribution point.

Dec 11, 2023 · “Cicada 3301 Deprogramming.” On the same Schoenberger channel, five years later, an upload titled “Deep Programming” (17,929 views). The credit stack:

Clapier did none of the work. Her name was attached to a video of mine, after the fact — the same name-coupling move the puppet-string chapter already shows on the Cicada side (chapter 15). On a page where the central dispute is who is responsible for what, adding a name to someone else’s credits is a cheap and effective smear.

Robert Simon Fine Art blog page (© 2017) · “{Three Roses} Leonardo da Vinci,” Sophia Musik channel, Jul 9, 2017 · “Unanimous – Savior of the World,” Unanimous channel · “Cicada 3301 Deprogramming / Deep Programming,” Dec 11, 2023 · Fright Knight YouTube channel, watch?v=NV4dE7W0ljA, with 2018 contact confirmations in my inbox: Th Stg → Frightknight@protonmail.com, “Hi Fright,” May 5, 2018; Juno3313 → Th Stg et al., Dec 25, 2018. Salvator Mundi public record from Christie’s November 2017 auction coverage (NYT, WSJ), the National Gallery London 2011 exhibition catalogue, and reporting on the Louvre’s 2019 refusal. Image of the painting © 2011 Salvator Mundi LLC via Robert Simon Fine Art; shown here for identification. Author’s note: in October 2017 I made “a quick sketch for an idea of liber primus cover” at Schoenberger’s request (my email archive, Oct 28, 2017) — part of what he was wiring together that autumn.

Thomas’s own admission: Clapier backdated a BitChute video to make 3301 look like Q

In a June 2026 email thread with Marcia Stockton (indigo3301@gmail.com) on the cc, Thomas writes about Lisa Clapier in his own words — not as an accusation someone made against him, but as his own account of what she did:

And, nine days later in the same thread:

Marcia confirmed in the same thread, when I asked whom he was describing: “That statement is about Lisa Clapier.”

So, in Thomas’s own account: Clapier uploaded a BitChute video in late November 2017 — after the first Q posts on 4chan on October 28, 2017 — and backdated it to September 2017, before Q, to manufacture the appearance that Cicada 3301 preceded Q. That piece of “evidence” then circulated in the Cicada=Q narrative that this file has been pulling apart from the inside.

He takes no credit; he says he was furious. The two things that admission establishes stand regardless of where he puts himself on it:

1. Clapier backdated a BitChute video to manufacture “3301 before Q” evidence.
2. Thomas knew it at the time, and still knows it now.

The BitChute URL inside the Three Roses description (bitchute.com/video/3M7BAT…) is a lead to the specific channel; whether it is the backdated upload or a different file on the same channel is open. The channel pattern — Unanimous / “Sophia Musik’s family of sisters” — is the one Thomas has already named, in his own description, as hers.

Thomas Schoenberger (thomasschoenbergermusic@gmail.com) → author, thread “Re: Interesting,” Jun 10, 2026, and “Re: How to break a man,” Jun 19, 2026, with indigo3301 (Marcia Stockton) on the cc confirming “That statement is about Lisa Clapier.” The BitChute URL fragment is from the description of the “{Three Roses} Leonardo da Vinci” video above. The identification of PistisSophia / Unanimous as Lisa Clapier is established in chapter 09.

“Cicada3301” the channel, “Q” the signature — in the same video description

The BitChute channel at the heart of the backdating admission is not an obscure fan page. It is literally called “Cicada3301” (238 subscribers at capture), and the description of one of its videos — “#Cicada3301 Follow The White Rabbit,” 9,445 views, uploaded nine years ago — closes with a single letter:

Three things are documented in that one block of text:

1. A channel branded Cicada3301 published a video whose description identifies the author simply as Q. Not “QAnon,” not a Q-adjacent reference — the letter Q as a signature. This is the Cicada=Q performance in a single artifact.
2. The description links sevens.exposed, the same domain Richard Miller handed to Esteban Trujillo in October 2019 “to bridge Cicada and WikiLeaks then let Manny take over” (chapter 14). The bridge is on the public record; so is the ownership path through Miller.
3. The companion link, “MOTHer,” points at a deprogramming.mp4 on a numeric .xyz domain. “Deep Programming” is the title Schoenberger put on the December 2023 YouTube upload where he attached Lisa Clapier’s name to my credits (first entry above). Same naming set, six years apart.

The sidebar on the same page lists another video on the same channel titled “#Cicada3301 Revelations September 23”: 1,996 views, nine years ago. A September-dated title on the same channel is the first candidate for the specific video Thomas described in his June 2026 email as the one Clapier backdated from late November 2017 to September 2017. Confirming its exact upload metadata is the next step and is open.

bitchute.com/video/1jEChDZQXTkg, channel “Cicada3301,” captured Oct 18, 2026. Sidebar titles from the same capture. Linked domains in the description resolved as text; sevens.exposed is the one covered in chapter 14. Specific upload-date metadata for “#Cicada3301 Revelations September 23” is the next item to pull before claiming it is the one Thomas described in the entry above.

The rose, the sisters, and the “feminine aspect” — where that language actually comes from

The Three Roses / Unanimous language above does not float in by itself. It belongs to a specific public New Age scene that pre-dates it by at least three years.

May 27, 2014 · Cobra, “Sisterhood of the Rose.” On 2012portal.blogspot.com, the pseudonymous “Cobra” of the self-described Resistance Movement defines a group called the Sisterhood of the Rose. The core framing, in his own words:

• The rose is sacred to Isis.
• Priestesses gather in circles of twelve to “anchor peace and harmony.”
• Sisterhood groups are “the feminine support for the planetary transition,” paired against masculine “Event Support” groups.
• Members should meet weekly, “invoke Goddess energy for planetary peace,” and converge at “the Event.”
• The Portal 2012 blog itself carries the tagline “The Intelligence Hub for the Victory of Light” in its own header — the branding, not a one-time sign-off.

2017 · Unanimous, same frame on YouTube. Three years later Schoenberger’s circle runs the identical register on a channel Thomas himself has already named as his: Unanimous as “Sacred Feminine · voice of” (chapter 08, {Stare}) and as “The Feminine Aspect of Anonymous” (Savior of the World entry above). The “Three Roses” title above borrows the rose motif that Cobra’s 2014 post sits on. The two scenes share vocabulary, iconography, and the Isis/goddess cosmology.

This is an ecosystem overlap, in public, in writing. What it is not, yet, is proof of a formal organizational tie between Lisa Clapier and Cobra’s Resistance Movement. Clapier’s own participation in the Sisterhood of the Rose network, as a member or an organizer, is a lead the author points to; the specific document that would establish it — a membership page, a signed statement, a cross-posted video on both the Unanimous channel and a Sisterhood-of-the-Rose property — has not surfaced in my inbox or in a quick public search. It stays open.

What is already established: Clapier is PistisSophia and sits behind Unanimous (chapter 09); Unanimous channels Cobra’s “feminine aspect” language; and Thomas has admitted in writing (the entry above) that she backdated a BitChute video to manufacture Cicada-equals-Q evidence. The lineage of the symbols around her is the Cobra / Portal 2012 / Sisterhood of the Rose scene — which is itself the broader audience the Salvator-Mundi “key to Liber Primus” story was built to reach.

Cobra, “Sisterhood of the Rose,” Portal 2012, May 27, 2014 · interview portal at sisterhoodoftherose.network. The “Sacred Feminine, voice of” and “Feminine Aspect of Anonymous” copy is from the Unanimous video descriptions documented above (chapter 08). Clapier’s formal relationship to the Cobra network remains open; this entry documents the shared frame, not the membership.

The Sisterhood of the Rose is hosted on Cobra’s platform: PrepareForChange.net

The entry above documents a shared vocabulary. Here is a shared address. On Oct 20, 2026 the top menu of prepareforchange.net had two sections side by side:

• “Resistance”: Cobra RM Resources, Cobra Internet Interview List, Cobra PFC Interviews, Letters to the Resistance Movement, Cobra Questions, Cobra Interview FAQ, Cobra Updates, Main Cobra Articles.
• “Sisterhood of the Rose”: Sisterhood Of The Rose Articles, “Join Sisterhood of the Rose and Newsletter Sign-up,” Community, Meditations, “The Goddess Vortex and Transmuting All Darkness.”

Both are live. The site’s post counts on that capture: Resistance 2,005; Sisterhood Of The Rose 1,334; Cobra Updates 300; Cobra PFC Interviews 21. The newest Cobra item is dated Oct 15, 2026 (“COBRA-14th October 2026 “Short Disclosure Update” (BRUSSELS ‘New Paradise’ Workshop NOTES…)”). The newest Sisterhood posts run Sep 16 to Oct 15, 2026, including “The Mother of Creation Explains the Coming ‘Great Flash’” (Oct 15).

The Sisterhood’s own site, sisterhoodoftherose.network, says it organized an interview “in conjunction with the Cobra International Team” with “chief intel provider ‘Cobra’” in June 2026 “to discuss the importance of the 12:21 Ascension Portal Activation Part 2 taking place in July.” It also tells readers that the way to “anchor the Goddess again” is to form Sisterhood groups that meet “at least once a week.”

What this settles. The Sisterhood is not a free-floating New Age label that Cobra’s circle happens to share. It is run inside his information network, with his interviews, his updates and his Portal activations. That makes it the feminine, meditation-facing wing of the same operation, which is the structure the Cobra–Unanimous entry above describes.

What it does not settle. The site names no operator on its homepage, and I did not find its About text. A related video description (Great Awakening Ministry, “SISTERHOOD OF THE ROSE”) says its guests are Bette, the Sisterhood’s representative for PrepareForChange.net, and Debra, who leads the Planetary Network and hosts monthly livestreams; I have not been able to load that description myself, and the names came to me by paste. Nothing here ties Clapier, Schoenberger or Eye the Spy to the Sisterhood.

Not to confuse. prepareforchange.org is the Schumacher Institute, a Bristol systems-thinking group, and has nothing to do with this. Separately, priestessesoftherose.com is a commercial “Rose Lineage” training with no Cobra link; the name travels well beyond his network.

prepareforchange.net homepage and menu, captured Oct 20, 2026; sisterhoodoftherose.network home page, same date. Related titles: Cobra, “The Portal – Saint Germain Activation, Thursday, May 14, 2026” (YouTube title; Saint Germain is the same figure Stone links to Q in chapter 10). Menu items and post counts change; this is a dated snapshot.

VictoryOfTheLight in its own posts: GameOver, Covfefe, Alice

The account is @KibBitzLaw, display name “VictoryOfTheLight,” the phrase Cobra’s Portal 2012 header carries (above). It is the account Defango was promoting on Steemit in May 2017 (chapter 09). Four dated captures show what it posted, in order.

May 9, 2017, 3:27 AM. A thread addressed to @StevePieczenik and @realDonaldTrump, among others: “Skippy did to Seth Rich. Seth laid down his life for a noble cause, but I learned from his mistakes. If you go after me or anyone of my family, the info gets released by redundancies built in. @wikileaks @JulianAssange, the story you hoped would be found has been found.” It closes “#GameOver. I’d advise that everyone heed my words and call off the Deep State / Shaddow Govt operatives on all sides.” That is the insider pitch in its first form, six weeks before the June 22 “life raft” message in chapter 09: a threat of automatic release, tied to Seth Rich.

Steemit, same month. Defango’s post “@victoryofthelight twitter account is Leaking Major Details on the Deep state on Twitter” repeats the register: “This is for JFK. This is for Seth Rich,” “Emperor George ‘Palpatine’ Soros and his son,” and it ends with the account’s link and a 4chan /pol/ thread (boards.4chan.org/pol/thread/124903658). The capture does not show the post date; chapter 09 dates the promotion to May 2017.

June 1, 2017, 00:42. On /pol/ itself, post No. 127966708 under the name VictoryOfLight, with an emblem that matches the Twitter avatar: “Covfefe was a code. Covfefe is Ancient Aramaic for Apocalypse… It’s go time, boys and girls!” A reply asks, “So they just updated the description?” The account posted to the board directly, not only through reposts. A separate, undated capture has it asking a correspondent that “if you do post any of our replies to /pol/” they should add a point about holding Israel accountable; I do not reproduce that capture, only note that the account knew its replies were being carried to /pol/.

November 13, 2017, 12:12 PM, sixteen days after Q’s first post: “Q is an individual representing a collective (Alice). Alice sends Q, the white rabbit, with the questions you must answer in order to ‘enter’ (discover) Wonderland, which is all around you. It’s only recently that Wonderland is under control of those who serve Light.” 198 retweets, 447 likes. My own working dossier lists a UK account, @SnowWhite7Alice, that joined in November 2017 with Alice-in-Wonderland theming and a #MEGA hashtag; whether this “Alice” is that account is open.

Screenshots from this author’s archive, not first-party archives; handles and times are as each capture shows them. The account was already tied to Defango and to the /pol/ insider scene in chapter 09. The June 22, 2017 “life raft” replies are quoted there and not repeated here.

“MegaAnon … is a source of ours”

A phone screenshot, with no date and no URL, of five consecutive posts by the same account:

This is the account asserting a channel to MEgaAnon, and that its material arrived about 48 hours before she posted it. It is a claim by the account, in a screenshot I cannot date, so it stays Claimed. If it were true it would make a two-way line between the two accounts; it does not say who either account was. It also does not change the circumstantial attribution of MEgaAnon in chapter 09. It does answer one open item in my own dossier, which asked for confirmation beyond VictoryOfTheLight: this is VictoryOfTheLight, so it is not independent.

Capture from this author’s archive; blog capture shows “Published on May 14, 2017” and “Posted on May 17, 2017.”

A DM that pastes a Pleiadian-and-archangel email, St. Germain included

Two screenshots of the account’s DM thread (8:45 PM on one carrier, 9:38 PM on another) show a pasted email in a ProtonMail web view, subject “(2) RE: Thanks for reaching out.” The visible text:

The email does not say who wrote it. What the capture shows is the cosmology of Cobra’s scene arriving through this account’s inbox: Cobra’s own 2014 Sisterhood of the Rose post, above, names “the Pleiadian fleet.” It also names St. Germain, the name chapter 09 documents in the October 2017 Cicada agreement (“professionally known as Thomas St. Germain”). St. Germain is a common figure in the ascended-master literature, so that match is a pointer, not proof. The same three names appear in my dossier’s section on this account.

Capture from this author’s archive. No sender, recipient or date is visible in the pasted email.

Cobra and MEgaAnon, leaving each other messages

My account: Cobra and MEgaAnon talked to each other and left each other messages. I have not attached the post, comment or screenshot that shows it, so this entry is a lead, not a finding, and it stays Unverified until the artifact is on the page.

What the captures above support, and what they do not. They show a line from VictoryOfTheLight to MEgaAnon (the account calls her “a source of ours,” Claimed) and a line from VictoryOfTheLight to Cobra’s vocabulary (the name, the Pleiadian email). They do not show Cobra himself in either exchange. The phrase is also not Cobra’s alone: Benjamin Fulford titled a November 16, 2018 update “Letters to the Editor: Victory of the Light,” so the account name proves a shared ecosystem, not a shared operator. A message between Cobra and MEgaAnon would be the third side of that triangle.

Where to look. Three places, all cited in my own email of June 20, 2026: the MegaAnon post compilation on Rumor Mill News (rumormillnews.com/texts/MegaAnon.txt), the archive of @SnowWhite7IAM’s deleted tweets, and Cobra’s Portal 2012 posts and comment threads from mid-2017. This desk could not retrieve the Rumor Mill file on October 19, 2026 (the host refused the connection), so none of the three has been checked for Cobra yet.

Author’s account; no document attached. Nothing here states what the messages said.