Air & OSINT · 28 September 2026 · Evening edition

Trackers report F-35 rotations through Europe as Fairford suspects are bailed

Flight trackers reported a dozen Tyndall F-35As moving toward RAF Lakenheath with six supporting tankers, while another dozen F-35As returning from CENTCOM were listed as diverted to Aviano. The detailed aircraft movements came as British police, according to reports relaying their statement, released five men arrested near RAF Fairford on bail. Separately, Russian drone strikes in Ukraine prompted reports of precautionary Polish air activity, and Israeli television reported additional American fighter arrivals at Ovda. These reports describe distinct developments, not a demonstrated common operation.

Tanker callsigns map fighter movements in both directions

DefenceGeek’s Coronet East update identified CE 118 as twelve 325th Fighter Wing F-35As, flying as TABOR71–76 and TABOR81–86 from Langley toward Lakenheath. Four KC-46As and two KC-135Rs were listed as GOLD21–23 and GOLD31–33. ArmchairAdml separately described the aircraft as Tyndall jets moving to Lakenheath; that account identified GOLD21 as KC-46A 17-46034, hex AE5E0F, and GOLD33 as KC-135 59-1516, hex AE04E6. The posts provide a reported routing and support package, rather than confirmation that every aircraft had landed. Movement detail · Tanker identifications

The same DefenceGeek update placed CE 119 in the opposite direction: twelve 388th Fighter Wing F-35As returning from CENTCOM, with their planned Lakenheath destination changed to Aviano. It listed CLEAN22 and CLEAN32 as supporting tankers and marked CLEAN23 and CLEAN33 as scrubbed. A third movement, CE 116, comprised six 482nd Fighter Wing F-16Cs, TABOR31–36, heading from Aviano toward CENTCOM with KC-135R CLEAN14, serial 61-0318 and hex AE04CB. The source did not establish why the F-35 diversion occurred. Coronet update

In a separate report, Faytuks Network relayed Channel 12’s claim that two additional U.S. fighter squadrons had arrived at Israel’s Ovda Airbase within the preceding 24 hours. Security officials cited in that report characterized the deployment as part of broader regional aircraft movements, not heightened readiness toward Iran. No aircraft identities in that post connect the reported arrivals to the Coronet packages. Ovda report

Fairford investigation continues without an established attack narrative

Lookner, citing a British police media statement, reported that the five men arrested near RAF Fairford were being released on police bail. A subsequent post relaying Sky News quoted the home secretary as saying the scene involving the white vans was safe and residents would soon be allowed home. DefenceGeek also circulated a report that tests found the materials in the vans were not viable explosives. Those updates do not establish either a completed attack plot or the explanations circulating among commentators. Police statement report · Scene declared safe · Reported test result

UK Defence Journal reported that counter-terrorism police were considering whether those involved might have acted as proxies or knowingly or unknowingly for a foreign state. That remained an investigative possibility, not an attribution. Global OSINT HQ separately reproduced the Iranian embassy’s categorical rejection of claims linking Iran to the five suspects. Investigative line · Embassy denial

Amid the coverage of the base, an observation by jamjake01, reposted by ArmchairAdml, reported U-2 BLACK01 returning to Fairford via Shawbury and working frequency 251.250. Elsewhere in Britain, ArmchairAdml identified Sky News helicopter G-UKTV, callsign LONDONEYE11 and hex 4011CD, as having flown over Mildenhall and Marham but been denied overflight of Lakenheath and asked to adjust its heading to avoid the air traffic zone. Neither observation by itself explains the security investigation or the fighter diversion. U-2 observation · Helicopter routing

Drone strikes near Poland and in Kyiv draw air-security attention

Faytuks Network reported Polish aircraft operating within Polish airspace as a precaution during Russian aerial strikes in Ukraine, alongside an RCB alert across Lublin Province. Its later report located a purported Geran-5 strike at the truck parking area near Ukraine’s Yahodyn border crossing, about one kilometre from Poland. Global OSINT HQ, attributing its account to the BBC and Ukraine’s State Border Guard Service, described a strike near the checkpoint and said preliminary information indicated no direct hit on the checkpoint itself. These later accounts placed the reported strike on the Ukrainian side; they did not substantiate the earlier uncertainty about a possible impact in Poland. Polish air activity · Border-area report · Border guard account relayed

In Kyiv, Osinttechnical reported Russian drones hitting the National Academy of Sciences, with employees escaping through windows, and additional strikes on residential buildings and a medical facility. Faytuks Network separately relayed President Zelenskyy’s statement that the academy and a central medical facility had been struck. The posts describe serious civilian-site damage but do not provide a complete independently verified assessment. Drone-strike report · Presidential account relayed

On the other side of the border, Osinttechnical attributed fires at several southern Russian fuel depots to Ukrainian attack drones and identified the Edelweiss-95 depot in Krasnodar Krai as one affected site. This was a separate reported strike sequence; the supplied material does not establish a direct operational connection to the attacks in Kyiv. Depot-strike report

Intercepts and identifiable surveillance flights

Sentdefender reported that Finnish and Swedish quick-reaction alert fighters had jointly intercepted and identified Russian military aircraft in international airspace over the Gulf of Finland on Thursday, describing it as the first joint mission of its kind. The post was published during this reporting period, but the interception itself was earlier. In southern Lebanon, Faytuks Network relayed an IDF statement that an interceptor had been launched toward a suspicious aerial target near an area of Israeli troop operations; the IDF said the incident remained under review and no sirens had sounded under its protocol. Joint interception report · IDF account

Among other identifiable tracking observations, War Watch Intel reported an E-6B Mercury using hex AF6630 without a callsign, while SkyGlass12 flagged P-8 THNDR03 airborne near Elgin. Those identifiers are more specific than generalized claims of unusually busy airspace, but neither post establishes an operational mission or a change in readiness. E-6B sighting · P-8 alert

DefenceGeek also noted a filed Columbus-to-Tampa route for KC-135R ABBOT86, serial 58-0018 and hex AE04B8, and questioned a mission code interpreted as supporting the 28th Bomb Wing. That was an analyst’s question about a flight-plan detail, not confirmation of a B-1 deployment. Separately, vcdgf555 identified KC-46A BOE122, hex AF549D, over Puget Sound on September 27. Tanker flight-plan observation · KC-46 sighting

Radar procurement and transport deliveries round out the picture

WarScopeGlobal, citing Naval Air Systems Command and Army Recognition, reported an award of up to $123.8 million to Northrop Grumman for long-lead materials for 67 AN/APG-85 radars for F-35s. The account described the radar as part of Block 4 modernization alongside the TR-3 computing upgrade and reported that some aircraft had been delivered with ballast pending radar installation. Those procurement and production claims remain attributed to that account. Radar procurement report

SkyGlass12 also reported delivery of Uzbekistan’s first C-390 transport and an MV-22B sonobuoy lot acceptance test. These short reports concern airlift and a potential additional aircraft role, respectively; they do not establish fleet-wide operational capability. C-390 delivery report · Osprey test report