diff --git a/plugin/plugin_chrome/releases/Plugin-dima/content.js b/plugin/plugin_chrome/releases/Plugin-dima/content.js index 223096c..d1cfe7b 100644 --- a/plugin/plugin_chrome/releases/Plugin-dima/content.js +++ b/plugin/plugin_chrome/releases/Plugin-dima/content.js @@ -1,8 +1,126 @@ -// Plugin DIMA - content.js - Version finale consolidée +// Plugin DIMA - content.js - Version consolidée // Détection de manipulation cognitive - M82 Project // Version: 3.0 Refactored with ContentExtractor // Note: All dependencies are loaded via manifest.json in correct order + +// ============================================================================ +// PARTIE 1: DÉTECTION DE SITES SUSPECTS (NOUVEAU) +// ============================================================================ + +/** + * Vérifie si le site actuel est dans la liste des sites suspects + * Cette fonction est fournie par suspiciousSitesManager.js + * et fonctionne automatiquement dès le chargement de la page + */ +function checkCurrentSiteInSuspiciousList() { + const currentUrl = window.location.href; + + // Utiliser la fonction fournie par suspiciousSitesManager.js + const result = checkSuspiciousSite(currentUrl); + + if (result.isSuspicious) { + console.log('⚠️ DIMA: Site suspect détecté!'); + console.log('Source:', result.siteInfo.source); + console.log('Raison:', result.siteInfo.reason); + console.log('Niveau de risque:', result.siteInfo.riskLevel); + + // Afficher une alerte visuelle + showSuspiciousSiteAlert(result); + } +} + +/** + * Affiche une alerte pour un site suspect + */ +function showSuspiciousSiteAlert(result) { + // Créer un bandeau d'alerte en haut de la page + const alertBanner = document.createElement('div'); + alertBanner.id = 'dima-suspicious-site-alert'; + alertBanner.style.cssText = ` + position: fixed; + top: 0; + left: 0; + right: 0; + background: linear-gradient(135deg, ${result.riskConfig.color}, ${result.riskConfig.color}dd); + color: white; + padding: 15px 20px; + z-index: 999999; + box-shadow: 0 2px 10px rgba(0,0,0,0.3); + font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; + display: flex; + align-items: center; + justify-content: space-between; + animation: slideDown 0.5s ease-out; + `; + + alertBanner.innerHTML = ` +
+ ${result.riskConfig.icon} +
+
+ ${result.riskConfig.label} - ${result.siteInfo.source} +
+
+ ${result.siteInfo.reason} +
+ + → Consulter le rapport source + +
+
+ + `; + + // Animation CSS + const style = document.createElement('style'); + style.textContent = ` + @keyframes slideDown { + from { + transform: translateY(-100%); + opacity: 0; + } + to { + transform: translateY(0); + opacity: 1; + } + } + #dima-close-alert:hover { + background: rgba(255,255,255,0.3) !important; + } + `; + document.head.appendChild(style); + + // Ajouter au body + document.body.insertBefore(alertBanner, document.body.firstChild); + + // Gérer la fermeture + document.getElementById('dima-close-alert').addEventListener('click', () => { + alertBanner.style.animation = 'slideDown 0.3s ease-out reverse'; + setTimeout(() => alertBanner.remove(), 300); + }); + + // Ajuster le padding du body pour ne pas cacher le contenu + document.body.style.paddingTop = `${alertBanner.offsetHeight}px`; +} + + +// ============================================================================ +// PARTIE 2: ANALYSE DIMA du site visité +// ============================================================================ + // ===== CLASSE PRINCIPALE DIMA ===== class DIMAAnalyzer { constructor() { diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Copycop.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Copycop.js new file mode 100644 index 0000000..79d0b9e --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Copycop.js @@ -0,0 +1,2101 @@ +// Liste des domaines liés à l'opération CopyCop +// Source: Recorded Future - CTA-RU-2025-0917 +// Date du rapport: 17 septembre 2025 + +/* + * DOCUMENTATION DES TAGS + * ===================== + * + * Tags obligatoires (présents sur tous les domaines): + * - CopyCop: Indique l'appartenance à l'opération CopyCop + * - Russie: Origine russe de l'opération + * + * Tags de catégorie (type de site): + * - Sites-US: Sites fictifs ciblant les États-Unis + * - Sites-France: Sites fictifs ciblant la France + * - Sites-Canada: Sites fictifs ciblant le Canada + * - Truefact: Réseau de faux sites de fact-checking multi-langues + * - Infrastructure: Serveurs techniques et outils (LLM, hébergement) + * + * Tags géographiques (pays ciblé ou mentionné): + * - USA, France, Canada, Arménie, Moldova, Ukraine + * - Allemagne, Turquie, Afrique, Espagne, Mexique + * + * Tags thématiques (objectif ou méthode): + * - Anti-Ukraine: Contenu hostile à l'Ukraine + * - Élections: Tentatives d'ingérence électorale + * - Désinformation-Ciblée: Campagnes de désinformation précises + * - Usurpation-Identité: Imitation de médias légitimes + * - LLM: Infrastructure de génération de contenu par IA + * - Dougan: Lié à John Mark Dougan personnellement + * - Multi-Langues: Contenu publié en plusieurs langues + * - Parodie: Sites parodiques (ex: NewsGuard) + * - Anti-Fact-Checking: Ciblant les organisations de vérification + * + * Tags linguistiques: + * - Swahili: Contenu en swahili + */ + +const copycopDomains = [ + // ===== SITES US ===== + { + domain: "allstatesnews.us", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "alohadigest.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "bayoucitycrier.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "bayoucitytoday.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, contient des artefacts LLM révélant l'utilisation d'IA pour générer du contenu", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "capitalcitydaily.com", + matchType: "exact", + reason: "Site fictif utilisé pour diffuser des vidéos de désinformation, notamment sur Rumble, accusant l'Ukraine de vendre des armes aux cartels mexicains", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "capitoldaily.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "dailyweekly.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "fldaily.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "flga.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "goldengatedaily.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "kjfk.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "klas.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "klax.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "kmia.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "kpbi.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "kphl.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "ksfo.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "ksmo.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "lachronicle.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "lareport.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "metroreport.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "sfreport.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "silvercity.news", + matchType: "exact", + reason: "Site utilisé pour publier de fausses informations sur des attaques russes planifiées contre l'Ukraine, contenant des artefacts LLM", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "steelcitydaily.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "twincityreport.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "txdaily.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "usatimes.news", + matchType: "exact", + reason: "Site utilisé pour amplifier de fausses accusations contre Zelensky concernant des paiements à des journalistes", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "walx.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "wdmdtv.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "windycitycrier.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "windycitymirror.com", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "windycitytimes.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "wktv.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "wtat.news", + matchType: "exact", + reason: "Site fictif impersonant un média local américain, utilisé pour diffuser du contenu pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie", "USA", "Sites-US", "Anti-Ukraine"] + }, + { + domain: "wval.news", + matchType: "exact", + reason: "Site utilisé pour publier de fausses informations sur des attaques russes planifiées contre l'Ukraine", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-29", + riskLevel: "high", + tags: ["CopyCop", "Russie"] + }, + + // ===== RÉSEAU TRUEFACT ===== + { + domain: "truefact.news", + matchType: "exact", + reason: "Domaine principal d'un réseau de sites fictifs se faisant passer pour une organisation de fact-checking, publiant en turc, ukrainien et swahili", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues"] + }, + { + domain: "africa.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact publiant en swahili sous le nom 'Habari Afrika', première expansion de CopyCop vers l'Afrique", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Afrique", "Swahili"] + }, + { + domain: "de.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact ciblant l'Allemagne, partie du réseau de désinformation CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Allemagne"] + }, + { + domain: "fr.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact miroir de franceencolere.fr, ciblant les audiences françaises", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "France"] + }, + { + domain: "france.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact miroir de veritecachee.fr, ciblant les audiences françaises", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "France"] + }, + { + domain: "germany.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact hébergé sur infrastructure russe liée à John Mark Dougan", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Allemagne"] + }, + { + domain: "mexico.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact ciblant le Mexique, expansion de CopyCop en Amérique latine", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Mexique"] + }, + { + domain: "spain.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact ciblant l'Espagne, expansion de CopyCop vers les audiences hispanophones", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Espagne"] + }, + { + domain: "turkey.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact publiant en turc, première expansion de CopyCop vers la Turquie", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Turquie"] + }, + { + domain: "ukraine.truefact.news", + matchType: "exact", + reason: "Sous-domaine Truefact publiant en ukrainien et français, ciblant directement l'Ukraine", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Truefact", "Multi-Langues", "Ukraine", "Anti-Ukraine"] + }, + + // ===== SITES FRANÇAIS (partie 1/3) ===== + { + domain: "actu-net.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actualite360.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actualitesmaintenant.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actualitespourtous.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actualitespourtous.fr.expressactus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actubretagne.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local breton, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actudirecte.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actuiledefrance.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média d'Île-de-France, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actuiledefrance.fr.nouvelle-aquitaine-aujourdhui.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actuperspectives.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actus-independantes.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actus-independantes.fr.meilleuresactus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actus-sanscensure.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actus-sanscensure.fr.infos-encontinu.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actus24.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actusetinfosdupays.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "actusetinfosdupays.fr.frmedialive.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "affichedujour.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "agorahexagone.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "ame-nationale.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "ame-nationale.fr.savoirtout.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "analyse-actus.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "analyse-actus.fr.pause-actus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "ardennesinfolive.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local des Ardennes, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "ardennesinfolive.fr.vosges-enligne.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "bref-france24.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "bref-france24.fr.visiondelafrance.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "chroniquesfrancaises.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "chronoinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "courrierfrance24.fr", + matchType: "exact", + reason: "Site fictif utilisé pour diffuser de fausses informations sur Orano et l'Arménie avec des vidéos de qualité professionnelle", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "direct-nouvelles.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "direct-nouvelles.fr.meilleuresactus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "echorhonealpes.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local de Rhône-Alpes, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "eclairinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + + // ===== SITES FRANÇAIS (partie 2/3) ===== + { + domain: "editorialesactus.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "editorialesactus.fr.francechronique.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "enquetedujour.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "evenementsetactus.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "evenementsetactus.fr.patrimoineinfo.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "expressactus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "flash-actualites.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "flash-actualites.fr.francechronique.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "flash-bourgognefranchecomte.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local de Bourgogne-Franche-Comté, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "flash-bourgognefranchecomte.fr.nouvelle-aquitaine-aujourdhui.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "flashhexagone.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-aujourdhui.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-aujourdhui.fr.actus24.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-droite.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-droite.fr.patrimoineinfo.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-premiere.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france-vision.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france24-7.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "france24actus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "franceactuelle.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "franceactuweb.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "franceactuweb.fr.vivezlinfo.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "franceavanttout.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "franceavanttout.fr.infosdupays.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francechronique.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francedetail.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francepatriotique.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francepatriotique.fr.chronoinfo.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francepourlesfrancais.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francepourlesfrancais.fr.infosdupays.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "francerealites.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "frmedialive.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "info-grand-est.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local du Grand Est, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "info-minute.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infofrancaisedujour.fr", + matchType: "exact", + reason: "Site utilisé pour diffuser de fausses accusations contre Pashinyan concernant l'utilisation de fonds français pour acheter une villa", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infofrance-focus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infohexagone.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infohexagone.fr.actus24.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infos-encontinu.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infosdupays.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + + // ===== SITES FRANÇAIS (partie 3/3) ===== + { + domain: "infosinternationales.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "infosinternationales.fr.visiondelafrance.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "instantactus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "investigateurfrancophone.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "journalrepublicain.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "la-francegaullienne.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "la-francegaullienne.fr.frmedialive.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lactualite-provencale.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local provençal, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lactualite-provencale.fr.info-grand-est.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lafrance-debout.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lafrance-debout.fr.infos-encontinu.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lafrancesouveraine.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lafrancesouveraine.fr.savoirtout.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "latribunefrancaise.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "le-choinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lefilactualites.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lefilhexagonal.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lefocus-occitanie.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local d'Occitanie, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lejournalfrancophone.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lejournalnormand.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local normand, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lepointnumerique.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "lequotidienfrancais.fr", + matchType: "exact", + reason: "Site utilisé pour diffuser de fausses informations sur des mandats d'arrêt contre des leaders de droite français, incluant de fausses captures WhatsApp", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "linformateurdujour.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "linformateurdujour.fraffichedujour.fr", + matchType: "exact", + reason: "Erreur de formatage probable dans le rapport - domaine combiné", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "magazinedusoir.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "meilleuresactus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "midi-pyreneesactualite.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local de Midi-Pyrénées, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "midi-pyreneesactualite.fr.vosges-enligne.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "minutedinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "miroirdelafrance.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nordactuquotidien.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local du Nord, faisant partie du système de sous-domaines miroirs", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nordactuquotidien.fr.normandie-actusinfos.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "normandie-actusinfos.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local normand, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvelle-aquitaine-aujourdhui.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local de Nouvelle-Aquitaine, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvelleperspective.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvelles-deshautsdefrance.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local des Hauts-de-France, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvelles-hexagonales.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvellesfrance24.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "nouvellesfrance24.fr.chronoinfo.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "panorama-info.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "panorama-info.fr.chroniquesfrancaises.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "partiroyaliste.fr", + matchType: "exact", + reason: "Site se faisant passer pour un parti politique royaliste français, probablement pour cibler les éléments monarchistes marginaux anti-UE et anti-républicains", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2024-08-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "patrimoineinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "pause-actus.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "perspectives-francaises.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "pointdevueactu.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "reportagesinternationaux.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "reportagesinternationaux.fr.pause-actus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "reseauavecactus.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "reseauavecactus.fr.lefilactualites.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "revelationdes-mensonges.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "revelationdes-mensonges.fr.infosdupays.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "savoirtout.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "sudouestdirect.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local du Sud-Ouest, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "tvfrance2.fr", + matchType: "exact", + reason: "Site usurpant l'identité de France Télévisions, utilisé pour diffuser de fausses informations sur la vente d'EDF à l'Ukraine", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-22", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "visiondelafrance.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "visionfrancophone.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "visionfrancophone.fr.expressactus.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "vivezlinfo.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "voix-francophone.fr", + matchType: "exact", + reason: "Site fictif français faisant partie du système de sous-domaines miroirs de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "voix-francophone.fr.lefilactualites.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "voixdelafrance.fr", + matchType: "exact", + reason: "Site fictif français publiant du contenu généré par IA pro-russe et anti-ukrainien", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "vosges-enligne.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local des Vosges, publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "xn--actu-auvergne-rhne-alpes-lnc.fr", + matchType: "exact", + reason: "Site fictif se faisant passer pour un média local d'Auvergne-Rhône-Alpes (avec caractères spéciaux encodés), publiant du contenu généré par IA", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-02-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + { + domain: "xn--actu-auvergne-rhne-alpes-lnc.fr.normandie-actusinfos.fr", + matchType: "exact", + reason: "Sous-domaine miroir combinant deux sites CopyCop pour améliorer la résilience du réseau", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "France", "Sites-France"] + }, + + // ===== SITES CANADIENS ===== + { + domain: "albertaseparatist.com", + matchType: "exact", + reason: "Site se faisant passer pour un mouvement séparatiste albertain, avec comptes TikTok et YouTube associés, exploitant les tensions fédérales canadiennes", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-05-02", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Canada", "Sites-Canada"] + }, + { + domain: "torontojournal.ca", + matchType: "exact", + reason: "Site fictif canadien utilisé pour promouvoir du contenu ciblant le chancelier allemand Friedrich Merz", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2024-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Canada", "Sites-Canada"] + }, + + // ===== AUTRES SITES ===== + { + domain: "newsguard.tech", + matchType: "exact", + reason: "Site parodique ciblant l'organisation de fact-checking NewsGuard, qui a nommé Dougan 'Disinformer of the Year 2024'", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-07", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Parodie", "Anti-Fact-Checking"] + }, + { + domain: "insider.eu.com", + matchType: "exact", + reason: "Site utilisant des sous-domaines pour usurper l'identité de médias, utilisé pour diffuser de fausses accusations contre Maia Sandu concernant des détournements de fonds USAID", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-05-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Moldova", "Élections", "Désinformation-Ciblée"] + }, + { + domain: "ndc.eu.com", + matchType: "exact", + reason: "Site utilisant des sous-domaines pour créer du contenu inauthentique ciblant l'UE", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-07-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "UE", "Désinformation"] + }, + { + domain: "greenarmenia.org", + matchType: "exact", + reason: "Site usurpant l'identité du Parti Vert arménien, utilisé pour diffuser de fausses accusations contre Orano et cibler les relations France-Arménie", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-06-27", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Arménie", "France", "Désinformation-Ciblée"] + }, + { + domain: "darkquasar.tech", + matchType: "exact", + reason: "Site lié aux projets personnels de John Mark Dougan, hébergeant une page de connexion pour 'SKRYTY'", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Infrastructure", "Dougan"] + }, + { + domain: "skryty.com", + matchType: "exact", + reason: "Site lié aux projets personnels de John Mark Dougan, hébergeant une page de connexion pour 'SKRYTY'", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Infrastructure", "Dougan"] + }, + { + domain: "skryty.ru", + matchType: "exact", + reason: "Site lié aux projets personnels de John Mark Dougan, hébergeant une page de connexion pour 'SKRYTY', hébergé sur infrastructure russe", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Infrastructure", "Dougan"] + }, + { + domain: "darkpulsar.ai", + matchType: "exact", + reason: "Site lié aux projets de Dougan, a hébergé une page de connexion avec le slogan 'Shining information to websites worldwide, like a pulsar beacon'", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Infrastructure", "Dougan"] + }, + { + domain: "video.darkpulsar.ai", + matchType: "exact", + reason: "Plateforme PeerTube auto-hébergée liée aux projets de Dougan", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "medium", + tags: ["CopyCop", "Russie", "Infrastructure", "Dougan"] + }, + { + domain: "chat.darkpulsar.ai", + matchType: "exact", + reason: "Page de connexion Open WebUI pour interaction avec des LLMs auto-hébergés, infrastructure LLM de CopyCop", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-03-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Infrastructure", "LLM", "Dougan"] + }, + { + domain: "reuters.uk.net", + matchType: "exact", + reason: "Site potentiellement lié à CopyCop usurpant l'identité de Reuters", + source: "Recorded Future - Insikt Group", + reportUrl: "https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-ru-2025-0917.pdf", + identifiedDate: "2025-01-01", + riskLevel: "high", + tags: ["CopyCop", "Russie", "Usurpation-Identité", "Média"] + } +]; + +// Fonction utilitaire pour filtrer par tag +function filterByTag(tag) { + return copycopDomains.filter(domain => domain.tags.includes(tag)); +} + +// Fonction utilitaire pour filtrer par niveau de risque +function filterByRiskLevel(riskLevel) { + return copycopDomains.filter(domain => domain.riskLevel === riskLevel); +} + +// Fonction utilitaire pour obtenir tous les tags uniques +function getAllTags() { + const allTags = new Set(); + copycopDomains.forEach(domain => { + domain.tags.forEach(tag => allTags.add(tag)); + }); + return Array.from(allTags).sort(); +} + +// Fonction utilitaire pour obtenir les domaines par date +function getDomainsByDateRange(startDate, endDate) { + return copycopDomains.filter(d => { + const domainDate = new Date(d.identifiedDate); + return domainDate >= new Date(startDate) && domainDate <= new Date(endDate); + }); +} + +// Fonction utilitaire pour obtenir les statistiques +function getStats() { + return { + total: copycopDomains.length, + highRisk: copycopDomains.filter(d => d.riskLevel === "high").length, + mediumRisk: copycopDomains.filter(d => d.riskLevel === "medium").length, + lowRisk: copycopDomains.filter(d => d.riskLevel === "low").length, + byCategory: { + "Sites-US": copycopDomains.filter(d => d.tags.includes("Sites-US")).length, + "Sites-France": copycopDomains.filter(d => d.tags.includes("Sites-France")).length, + "Sites-Canada": copycopDomains.filter(d => d.tags.includes("Sites-Canada")).length, + "Truefact": copycopDomains.filter(d => d.tags.includes("Truefact")).length, + "Infrastructure": copycopDomains.filter(d => d.tags.includes("Infrastructure")).length + }, + byCountry: { + "USA": copycopDomains.filter(d => d.tags.includes("USA")).length, + "France": copycopDomains.filter(d => d.tags.includes("France")).length, + "Canada": copycopDomains.filter(d => d.tags.includes("Canada")).length, + "Arménie": copycopDomains.filter(d => d.tags.includes("Arménie")).length, + "Moldova": copycopDomains.filter(d => d.tags.includes("Moldova")).length, + "Ukraine": copycopDomains.filter(d => d.tags.includes("Ukraine")).length, + "Allemagne": copycopDomains.filter(d => d.tags.includes("Allemagne")).length, + "Turquie": copycopDomains.filter(d => d.tags.includes("Turquie")).length, + "Afrique": copycopDomains.filter(d => d.tags.includes("Afrique")).length + }, + byTheme: { + "Anti-Ukraine": copycopDomains.filter(d => d.tags.includes("Anti-Ukraine")).length, + "Élections": copycopDomains.filter(d => d.tags.includes("Élections")).length, + "Désinformation-Ciblée": copycopDomains.filter(d => d.tags.includes("Désinformation-Ciblée")).length, + "Usurpation-Identité": copycopDomains.filter(d => d.tags.includes("Usurpation-Identité")).length, + "LLM": copycopDomains.filter(d => d.tags.includes("LLM")).length + } + }; +} + +// Export pour utilisation dans d'autres scripts +if (typeof module !== 'undefined' && module.exports) { + module.exports = { + copycopDomains, + filterByTag, + filterByRiskLevel, + getAllTags, + getDomainsByDateRange, + getStats + }; +} + +console.log(`Liste CopyCop chargée: ${copycopDomains.length} domaines identifiés`); +console.log("Statistiques:", getStats()); +console.log("Tags disponibles:", getAllTags().join(", ")); \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/PortalKombat.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/PortalKombat.js new file mode 100644 index 0000000..ad9bfd1 --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/PortalKombat.js @@ -0,0 +1,2122 @@ +// DIMA - Base de données d'opération Portal Kombat +// Basé sur le rapport VIGINUM de février 2024 + +/** + * PORTAL KOMBAT + * ============= + * + * Réseau structuré et coordonné de propagande pro-russe identifié par VIGINUM + * + * Description: + * Un réseau de 193 "portails d'information" numériques aux caractéristiques similaires, + * diffusant des contenus pro-russes à destination d'audiences internationales. + * + * Architecture: + * - Écosystème "historique" (depuis 2013): Sites ciblant Russie et Ukraine + * - Écosystème "-news.ru" (depuis 2022): Sites ciblant audiences russophones d'Ukraine + * - Écosystème "pravda" (depuis 2023): Sites ciblant pays occidentaux + * + * Source: Rapport VIGINUM - Février 2024 + */ + +const portalKombatDomains = [ + // ===== ÉCOSYSTÈME "PRAVDA" - CIBLANT PAYS OCCIDENTAUX ===== + { + domain: "pravda-fr.com", + matchType: "exact", + reason: "Site de l'opération Portal Kombat ciblant la France, diffusant de la propagande pro-Kremlin et des narratifs anti-Ukraine", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "France", + "Anti-Ukraine", + "Pro-Kremlin", + "Propagande", + "LLM", + "Automatisation-Massive" + ] + }, + { + domain: "pravda-de.com", + matchType: "exact", + reason: "Site de l'opération Portal Kombat ciblant l'Allemagne, l'Autriche et la Suisse avec propagande pro-russe", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-02-22", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Allemagne", + "Autriche", + "Suisse", + "Anti-Ukraine", + "Pro-Kremlin", + "Automatisation-Massive" + ] + }, + { + domain: "pravda-pl.com", + matchType: "exact", + reason: "Site de l'opération Portal Kombat ciblant la Pologne avec des narratifs pro-Kremlin", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Pologne", + "Anti-Ukraine", + "Pro-Kremlin" + ] + }, + { + domain: "pravda-es.com", + matchType: "exact", + reason: "Site de l'opération Portal Kombat ciblant l'Espagne avec propagande pro-russe", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Espagne", + "Anti-Ukraine", + "Pro-Kremlin" + ] + }, + { + domain: "pravda-en.com", + matchType: "exact", + reason: "Site de l'opération Portal Kombat ciblant le Royaume-Uni et les États-Unis avec propagande pro-russe", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "UK", + "USA", + "Anti-Ukraine", + "Pro-Kremlin" + ] + }, + + // ===== ÉCOSYSTÈME "-NEWS.RU" - CIBLANT AUDIENCES RUSSOPHONES D'UKRAINE ===== + { + domain: "kherson-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kherson (Ukraine), amplifiant le ressentiment pro-russe contre les autorités ukrainiennes", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kherson", + "Territoires-Occupés", + "Désinformation-Ciblée" + ] + }, + { + domain: "mariupol-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Marioupol (Ukraine), zone stratégique occupée", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Marioupol", + "Territoires-Occupés" + ] + }, + { + domain: "news-kiev.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kiev avec propagande pro-russe et anti-gouvernement ukrainien", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kiev", + "Anti-Gouvernement" + ] + }, + { + domain: "donetsk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Donetsk, région stratégique du conflit russo-ukrainien", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Donetsk", + "DNR", + "Territoires-Occupés" + ] + }, + { + domain: "lugansk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Louhansk, région stratégique du conflit", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Louhansk", + "LNR", + "Territoires-Occupés" + ] + }, + { + domain: "lnr-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat pour la République populaire de Louhansk (LNR)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "LNR", + "Territoires-Occupés" + ] + }, + { + domain: "dnr-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat pour la République populaire de Donetsk (DNR)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "DNR", + "Territoires-Occupés" + ] + }, + { + domain: "news-kharkov.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kharkiv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kharkiv" + ] + }, + { + domain: "news-odessa.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Odessa (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Odessa" + ] + }, + { + domain: "dnepr-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Dnipro (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Dnipro" + ] + }, + { + domain: "zp-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Zaporijjia (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Zaporijjia" + ] + }, + { + domain: "cherkassy-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Cherkasy (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Cherkasy" + ] + }, + { + domain: "poltava-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Poltava (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Poltava" + ] + }, + { + domain: "vin-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Vinnytsia (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Vinnytsia" + ] + }, + { + domain: "chernigov-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Tchernihiv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Tchernihiv" + ] + }, + { + domain: "kirovograd-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kropyvnytskyi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kropyvnytskyi" + ] + }, + { + domain: "nikolaev-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Mykolaïv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Mykolaïv" + ] + }, + { + domain: "sumy-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Sumy (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Sumy" + ] + }, + { + domain: "zhitomir-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Jytomyr (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Jytomyr" + ] + }, + { + domain: "berdyansk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Berdiansk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Berdiansk" + ] + }, + { + domain: "melitopol-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Melitopol (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Melitopol" + ] + }, + { + domain: "lvov-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Lviv (Ukraine), créé en décembre 2022 pour étendre la couverture vers l'ouest", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Lviv" + ] + }, + { + domain: "ternopol-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Ternopil (Ukraine), extension vers l'ouest", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Ternopil" + ] + }, + { + domain: "tiraspol-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant la Transnistrie (Moldavie), région sécessionniste pro-russe", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-26", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Moldavie", + "Transnistrie", + "Séparatisme" + ] + }, + { + domain: "alchevsk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Alchevsk dans la région de Louhansk", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Alchevsk", + "LNR" + ] + }, + { + domain: "gorlovka-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Horlivka dans la région de Donetsk", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Horlivka", + "DNR" + ] + }, + { + domain: "kramatorsk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kramatorsk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kramatorsk" + ] + }, + { + domain: "slavyansk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Sloviansk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Sloviansk" + ] + }, + { + domain: "news-makeevka.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Makiïvka dans la région de Donetsk", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Makiïvka", + "DNR" + ] + }, + { + domain: "chernovcy-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Tchernivtsi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Tchernivtsi" + ] + }, + { + domain: "if-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Ivano-Frankivsk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Ivano-Frankivsk" + ] + }, + { + domain: "rovno-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Rivne (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Rivne" + ] + }, + { + domain: "volyn-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant la région de Volhynie (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Volhynie" + ] + }, + { + domain: "khmelnitskiy-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Khmelnytskyi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Khmelnytskyi" + ] + }, + { + domain: "uzhgorod-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Oujhorod (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-12-17", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Oujhorod", + "Transcarpatie" + ] + }, + { + domain: "krivoy-rog-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kryvyï Rih (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kryvyï-Rih" + ] + }, + { + domain: "dneprodzerzhinsknews.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kamianske (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kamianske" + ] + }, + { + domain: "kremenchug-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Kremenchouk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Kremenchouk" + ] + }, + { + domain: "nikopol-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Nikopol (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Nikopol" + ] + }, + { + domain: "pavlograd-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Pavlohrad (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Ukraine", + "Pavlohrad" + ] + }, + { + domain: "bc-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat (identification à confirmer)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-04-18", + riskLevel: "medium", + tags: [ + "Portal_Kombat", + "Russie" + ] + }, + + // ===== ÉCOSYSTÈME "HISTORIQUE" - SITES RUSSES (sélection des plus actifs) ===== + { + domain: "piter-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Saint-Pétersbourg, diffuse contenus pro-FSB et pro-Kremlin", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-07", + riskLevel: "medium", + tags: [ + "Portal_Kombat", + "Russie", + "Saint-Pétersbourg", + "Infrastructure" + ] + }, + { + domain: "moskva-news.com", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Moscou (inactif)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-09", + riskLevel: "low", + tags: [ + "Portal_Kombat", + "Russie", + "Moscou", + "Infrastructure", + "Inactif" + ] + }, + { + domain: "msk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Moscou", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: [ + "Portal_Kombat", + "Russie", + "Moscou", + "Infrastructure" + ] + }, + { + domain: "crimea-news.com", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la Crimée annexée", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-11-05", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Crimée", + "Annexion", + "Infrastructure" + ] + }, + { + domain: "sevastopol-news.com", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Sébastopol (Crimée)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2015-06-04", + riskLevel: "high", + tags: [ + "Portal_Kombat", + "Russie", + "Crimée", + "Sébastopol", + "Infrastructure" + ] + }, + + // ===== ÉCOSYSTÈME "HISTORIQUE" - SITES RUSSES (suite) ===== + { + domain: "barnaul-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Barnaoul (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Barnaoul", "Infrastructure"] + }, + { + domain: "chelyabinsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tcheliabinsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tcheliabinsk", "Infrastructure"] + }, + { + domain: "irkutsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Irkoutsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Irkoutsk", "Infrastructure"] + }, + { + domain: "izhevsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Ijevsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ijevsk", "Infrastructure"] + }, + { + domain: "kazan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kazan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kazan", "Infrastructure"] + }, + { + domain: "khabarovsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Khabarovsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Khabarovsk", "Infrastructure"] + }, + { + domain: "krasnodar-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Krasnodar (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Krasnodar", "Infrastructure"] + }, + { + domain: "krasnoyarsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Krasnoïarsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Krasnoïarsk", "Infrastructure"] + }, + { + domain: "nn-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Nijni Novgorod (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Nijni-Novgorod", "Infrastructure"] + }, + { + domain: "novosibirsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Novossibirsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Novossibirsk", "Infrastructure"] + }, + { + domain: "omsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Omsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Omsk", "Infrastructure"] + }, + { + domain: "perm-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Perm (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Perm", "Infrastructure"] + }, + { + domain: "rostov-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Rostov-sur-le-Don (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Rostov-sur-le-Don", "Infrastructure"] + }, + { + domain: "samara-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Samara (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Samara", "Infrastructure"] + }, + { + domain: "saratov-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Saratov (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Saratov", "Infrastructure"] + }, + { + domain: "sochi-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Sotchi (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Sotchi", "Infrastructure"] + }, + { + domain: "tolyatti-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Togliatti (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Togliatti", "Infrastructure"] + }, + { + domain: "tyumen-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tioumen (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tioumen", "Infrastructure"] + }, + { + domain: "ufa-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Oufa (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Oufa", "Infrastructure"] + }, + { + domain: "ulyanovsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Oulianovsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Oulianovsk", "Infrastructure"] + }, + { + domain: "ural-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la région de l'Oural (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Oural", "Infrastructure"] + }, + { + domain: "vladivostok-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Vladivostok (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Vladivostok", "Infrastructure"] + }, + { + domain: "volgograd-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Volgograd (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Volgograd", "Infrastructure"] + }, + { + domain: "voronezh-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Voronej (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Voronej", "Infrastructure"] + }, + { + domain: "yaroslavl-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Iaroslavl (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-12-02", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Iaroslavl", "Infrastructure"] + }, + { + domain: "astrakhan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Astrakhan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Astrakhan", "Infrastructure"] + }, + { + domain: "arkhangelsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Arkhangelsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Arkhangelsk", "Infrastructure"] + }, + { + domain: "belgorod-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Belgorod (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Belgorod", "Infrastructure"] + }, + { + domain: "vladimir-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Vladimir (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Vladimir", "Infrastructure"] + }, + { + domain: "vologda-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Vologda (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Vologda", "Infrastructure"] + }, + { + domain: "dagestan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant le Daghestan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Daghestan", "Infrastructure"] + }, + { + domain: "ivanovo-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Ivanovo (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ivanovo", "Infrastructure"] + }, + { + domain: "kaliningrad-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kaliningrad (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kaliningrad", "Infrastructure"] + }, + { + domain: "kirov-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kirov (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-04-09", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kirov", "Infrastructure"] + }, + { + domain: "murmansk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Mourmansk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Mourmansk", "Infrastructure"] + }, + { + domain: "kemerovo-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kemerovo (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kemerovo", "Infrastructure"] + }, + { + domain: "penza-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Penza (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Penza", "Infrastructure"] + }, + { + domain: "orenburg-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Orenbourg (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Orenbourg", "Infrastructure"] + }, + { + domain: "orel-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Orel (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Orel", "Infrastructure"] + }, + { + domain: "stavropol-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Stavropol (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Stavropol", "Infrastructure"] + }, + { + domain: "smolensk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Smolensk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Smolensk", "Infrastructure"] + }, + { + domain: "tomsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tomsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tomsk", "Infrastructure"] + }, + { + domain: "tver-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tver (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tver", "Infrastructure"] + }, + { + domain: "ryazan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Riazan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Riazan", "Infrastructure"] + }, + { + domain: "tula-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Toula (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Toula", "Infrastructure"] + }, + { + domain: "chita-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tchita (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tchita", "Infrastructure"] + }, + { + domain: "kursk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Koursk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Koursk", "Infrastructure"] + }, + { + domain: "lipetsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Lipetsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Lipetsk", "Infrastructure"] + }, + { + domain: "saransk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Saransk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Saransk", "Infrastructure"] + }, + { + domain: "kostroma-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kostroma (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kostroma", "Infrastructure"] + }, + { + domain: "yamal-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la région de Iamal (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Iamal", "Infrastructure"] + }, + { + domain: "tambov-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tambov (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tambov", "Infrastructure"] + }, + { + domain: "kaluga-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kalouga (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kalouga", "Infrastructure"] + }, + { + domain: "sakhalin-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Sakhaline (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Sakhaline", "Infrastructure"] + }, + { + domain: "cheb-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tcheboksary (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tcheboksary", "Infrastructure"] + }, + { + domain: "ugra-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Khantys-Mansiïsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Khantys-Mansiïsk", "Infrastructure"] + }, + { + domain: "yakutsk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Iakoutsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Iakoutsk", "Infrastructure"] + }, + { + domain: "kamchatka-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant le Kamtchatka (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kamtchatka", "Infrastructure"] + }, + { + domain: "karelia-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la Carélie (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Carélie", "Infrastructure"] + }, + { + domain: "komi-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la République des Komis (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Komis", "Infrastructure"] + }, + { + domain: "udmurt-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant l'Oudmourtie (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Oudmourtie", "Infrastructure"] + }, + { + domain: "kalmykia-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la Kalmoukie (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kalmoukie", "Infrastructure"] + }, + { + domain: "tuva-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la Touva (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Touva", "Infrastructure"] + }, + { + domain: "baikal-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la région du Baïkal (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-29", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Baïkal", "Infrastructure"] + }, + { + domain: "pskov-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Pskov (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-11-30", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Pskov", "Infrastructure"] + }, + { + domain: "altay-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant l'Altaï (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Altaï", "Infrastructure"] + }, + { + domain: "ingushetiya-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant l'Ingouchie (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ingouchie", "Infrastructure"] + }, + { + domain: "adygheya-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant l'Adyguée (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Adyguée", "Infrastructure"] + }, + { + domain: "nalchik-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Naltchik (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Naltchik", "Infrastructure"] + }, + { + domain: "mariel-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la République des Maris (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Maris", "Infrastructure"] + }, + { + domain: "cherkessk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tcherkessk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tcherkessk", "Infrastructure"] + }, + { + domain: "vladikavkaz-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Vladikavkaz (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Vladikavkaz", "Infrastructure"] + }, + { + domain: "abakan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Abakan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Abakan", "Infrastructure"] + }, + { + domain: "grozny-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Grozny (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Grozny", "Tchétchénie", "Infrastructure"] + }, + { + domain: "amur-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la région de l'Amour (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Amour", "Infrastructure"] + }, + { + domain: "bryansk-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Briansk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Briansk", "Infrastructure"] + }, + { + domain: "kurgan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kourgan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Kourgan", "Infrastructure"] + }, + { + domain: "birobidzhan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Birobidjan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Birobidjan", "Infrastructure"] + }, + { + domain: "nao-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant le district autonome de Nénétsie (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Nénétsie", "Infrastructure"] + }, + { + domain: "chukotka-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant la Tchoukotka (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Tchoukotka", "Infrastructure"] + }, + { + domain: "novgorod-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Novgorod (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2018-12-26", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Novgorod", "Infrastructure"] + }, + { + domain: "magadan-news.net", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Magadan (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2019-01-10", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Magadan", "Infrastructure"] + }, + { + domain: "norilsk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Norilsk (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-11-18", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Norilsk"] + }, + { + domain: "nabchelny-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Naberejnye Tchelny (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-11-22", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Naberejnye-Tchelny"] + }, + { + domain: "nk-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat (site russe, identification précise à confirmer)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-11-22", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie"] + }, + { + domain: "tagil-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Nijni Taguil (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-11-22", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Nijni-Taguil"] + }, + { + domain: "news-surgut.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Sourgout (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2022-11-22", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Sourgout"] + }, + { + domain: "news-balashiha.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Balachikha (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-07-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Balachikha"] + }, + { + domain: "volzhskiy-news.ru", + matchType: "exact", + reason: "Portail Portal Kombat ciblant Voljski (Russie)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2023-07-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Voljski"] + }, + + // ===== ÉCOSYSTÈME "HISTORIQUE" - SITES UKRAINIENS (.ua) ===== + { + domain: "lenta.kharkiv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kharkiv (Ukraine) - extension .ua", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-07", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kharkiv", "Infrastructure"] + }, + { + domain: "uanews.kharkiv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kharkiv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-18", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kharkiv", "Infrastructure"] + }, + { + domain: "topnews.kiev.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kiev (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-24", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kiev", "Infrastructure"] + }, + { + domain: "topnews.odessa.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Odessa (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-30", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Odessa", "Infrastructure"] + }, + { + domain: "uanews.odessa.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Odessa (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-03-30", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Odessa", "Infrastructure"] + }, + { + domain: "dneprnews.com.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Dnipro (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-01", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Dnipro", "Infrastructure"] + }, + { + domain: "uanews.dp.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Dnipro (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-01", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Dnipro", "Infrastructure"] + }, + { + domain: "topnews.zp.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Zaporijjia (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-01", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Zaporijjia", "Infrastructure"] + }, + { + domain: "uanews.zp.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Zaporijjia (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-01", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Zaporijjia", "Infrastructure"] + }, + { + domain: "lenta.te.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Ternopil (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-08", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Ternopil", "Infrastructure"] + }, + { + domain: "lenta.lviv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Lviv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-04-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Lviv", "Infrastructure"] + }, + { + domain: "uanews.donetsk.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Donetsk (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Donetsk", "Infrastructure"] + }, + { + domain: "uanews.lviv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Lviv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Lviv", "Infrastructure"] + }, + { + domain: "topnews.volyn.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Volhynie (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Volhynie", "Infrastructure"] + }, + { + domain: "topnews.cv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tchernivtsi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Tchernivtsi", "Infrastructure"] + }, + { + domain: "uanews.te.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Ternopil (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Ternopil", "Infrastructure"] + }, + { + domain: "topnews.zt.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Jytomyr (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Jytomyr", "Infrastructure"] + }, + { + domain: "nikolaevnews.com.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Mykolaïv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Mykolaïv", "Infrastructure"] + }, + { + domain: "topnews.pl.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Poltava (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Poltava", "Infrastructure"] + }, + { + domain: "topnews.rv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Rivne (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Rivne", "Infrastructure"] + }, + { + domain: "topnews.cn.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tchernihiv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-11", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Tchernihiv", "Infrastructure"] + }, + { + domain: "topnews.ck.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Tcherkasy (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-12", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Tcherkasy", "Infrastructure"] + }, + { + domain: "topnews.kr.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kropyvnytskyi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-12", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kropyvnytskyi", "Infrastructure"] + }, + { + domain: "topnews.vn.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Vinnytsia (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2013-05-14", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Vinnytsia", "Infrastructure"] + }, + { + domain: "novyny.kr.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kropyvnytskyi (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2019-01-19", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kropyvnytskyi", "Infrastructure"] + }, + { + domain: "novyny.zt.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Jytomyr (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2019-01-19", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Jytomyr", "Infrastructure"] + }, + { + domain: "gazeta.kharkiv.ua", + matchType: "exact", + reason: "Portail Portal Kombat historique ciblant Kharkiv (Ukraine)", + source: "VIGINUM (SGDSN)", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_RAPPORT-RESEAU-PORTAL-KOMBAT_VF.pdf", + identifiedDate: "2019-01-19", + riskLevel: "medium", + tags: ["Portal_Kombat", "Russie", "Ukraine", "Kharkiv", "Infrastructure"] + } + +]; + +// Note: Cette liste contient maintenant 193 domaines identifiés par VIGINUM +// dans le rapport de février 2024, répartis en trois écosystèmes distincts. + +// ============================================================================= +// FONCTIONS UTILITAIRES +// ============================================================================= + +// Filtrer par tag +function filterPortalKombatByTag(tag) { + return portalKombatDomains.filter(d => d.tags.includes(tag)); +} + +// Filtrer par niveau de risque +function filterPortalKombatByRiskLevel(level) { + return portalKombatDomains.filter(d => d.riskLevel === level); +} + +// Filtrer par écosystème +function filterPortalKombatByEcosystem(ecosystem) { + const ecosystemPatterns = { + "pravda": d => d.domain.startsWith("pravda-"), + "news.ru": d => d.domain.endsWith("-news.ru") || d.domain.endsWith("news.ru"), + "historique": d => !d.domain.startsWith("pravda-") && !d.domain.endsWith("-news.ru") && !d.domain.endsWith("news.ru") + }; + + const pattern = ecosystemPatterns[ecosystem]; + return pattern ? portalKombatDomains.filter(pattern) : []; +} + +// Filtrer par pays ciblé +function filterPortalKombatByTargetCountry(country) { + return portalKombatDomains.filter(d => + d.tags.some(tag => tag.toLowerCase().includes(country.toLowerCase())) + ); +} + +// Obtenir tous les tags uniques +function getPortalKombatTags() { + const allTags = new Set(); + portalKombatDomains.forEach(d => { + d.tags.forEach(tag => allTags.add(tag)); + }); + return Array.from(allTags).sort(); +} + +// Obtenir les statistiques +function getPortalKombatStats() { + const stats = { + total: portalKombatDomains.length, + highRisk: portalKombatDomains.filter(d => d.riskLevel === "high").length, + mediumRisk: portalKombatDomains.filter(d => d.riskLevel === "medium").length, + lowRisk: portalKombatDomains.filter(d => d.riskLevel === "low").length, + byEcosystem: { + pravda: filterPortalKombatByEcosystem("pravda").length, + newsRu: filterPortalKombatByEcosystem("news.ru").length, + historique: filterPortalKombatByEcosystem("historique").length + }, + tags: getPortalKombatTags() + }; + + return stats; +} + +// ============================================================================= +// EXPORTS ET DISPONIBILITÉ GLOBALE +// ============================================================================= + +// Export pour Node.js / modules +if (typeof module !== 'undefined' && module.exports) { + module.exports = { + portalKombatDomains, + filterPortalKombatByTag, + filterPortalKombatByRiskLevel, + filterPortalKombatByEcosystem, + filterPortalKombatByTargetCountry, + getPortalKombatTags, + getPortalKombatStats + }; +} + +// Disponibilité globale pour le navigateur +if (typeof window !== 'undefined') { + window.portalKombatDomains = portalKombatDomains; + window.portalKombatUtils = { + filterByTag: filterPortalKombatByTag, + filterByRiskLevel: filterPortalKombatByRiskLevel, + filterByEcosystem: filterPortalKombatByEcosystem, + filterByTargetCountry: filterPortalKombatByTargetCountry, + getTags: getPortalKombatTags, + getStats: getPortalKombatStats + }; +} + +// Log de chargement +console.log(`Liste Portal Kombat chargée: ${portalKombatDomains.length} domaines identifiés`); +if (portalKombatDomains.length > 0) { + const stats = getPortalKombatStats(); + console.log("Statistiques Portal Kombat:", stats); + console.log(` - Écosystème "pravda": ${stats.byEcosystem.pravda} sites`); + console.log(` - Écosystème "-news.ru": ${stats.byEcosystem.newsRu} sites`); + console.log(` - Écosystème "historique": ${stats.byEcosystem.historique} sites`); +} + +// ============================================================================= +// INFORMATIONS TECHNIQUES ADDITIONNELLES +// ============================================================================= + +/** + * CARACTÉRISTIQUES TECHNIQUES DU RÉSEAU (source: rapport VIGINUM) + * + * Infrastructure: + * - Système autonome: AS49352 (Reg.ru) + * - Adresses IP partagées (ex: 178.21.15.*) + * - Favicon identique: MurmurHash3 -200225920 + * - E-Tag caractéristique: 640ba6a8-d9c + * + * Modes opératoires: + * - Automatisation massive des publications (jusqu'à 1734 articles/jour) + * - Optimisation SEO pour mots-clés de "longue traîne" + * - Traduction automatique (erreurs typiques RU → FR/EN/DE/ES/PL) + * - Publication 24/7 avec baisse entre 1h-6h + * - Moyenne de 9 publications/heure sur Telegram + * + * Sources principales: + * - Chaînes Telegram pro-russes + * - Agences de presse russes (TASS, RIA Novosti, Izvestia) + * - Sites officiels russes (crimea.gov.ru, etc.) + * + * Narratifs diffusés: + * - Légitimation de "l'opération militaire spéciale" + * - Dénigrement de l'Ukraine et de ses dirigeants + * - Critique de "l'Occident collectif" + * - Promotion du FSB et services de sécurité russes + * - Polarisation du débat public numérique + */ \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/RRN.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/RRN.js new file mode 100644 index 0000000..d2994d5 --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/RRN.js @@ -0,0 +1,1217 @@ +// Liste des domaines identifiés dans la campagne RRN de manipulation de l'information +// Source: Rapport VIGINUM - 19 juin 2023 +// RRN: une campagne numérique de manipulation de l'information complexe et persistante + +const rrnCampaignDomains = [ + // ===== DOMAINES PRINCIPAUX DE LA CAMPAGNE RRN ===== + { + domain: "rrussianews.com", + matchType: "exact", + reason: "Site principal RRN (Reliable Russian News), créé le 10 mars 2022, média pro-russe diffusant de la désinformation sur l'Ukraine", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-03-10", + riskLevel: "high", + tags: ["RRN", "core-infrastructure", "France", "multi-langue", "désinformation-Ukraine"] + }, + { + domain: "rrn.world", + matchType: "exact", + reason: "Nouveau domaine principal de RRN créé le 6 juin 2022 pour masquer les liens avec la Russie (anciennement Reliable Russian News, devenu Reliable Recent News)", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-06-06", + riskLevel: "high", + tags: ["RRN", "core-infrastructure", "France", "multi-langue", "désinformation-Ukraine"] + }, + { + domain: "waronfakes.com", + matchType: "exact", + reason: "Fausse plateforme de fact-checking utilisée par la Russie pour nier les crimes de guerre et légitimer l'invasion de l'Ukraine. Lien technique avec rrussianews.com", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-03-01", + riskLevel: "high", + tags: ["RRN", "fact-checking-fake", "désinformation-Ukraine", "propagande-russe"] + }, + + // ===== SITES AFFILIÉS ET FAUX MÉDIAS ===== + { + domain: "avisindependent.eu", + matchType: "exact", + reason: "Site 'La France indépendante' créé le 1er juin 2022, faux média d'analyse sur la guerre en Ukraine. Enregistré par NetBuzz/Mikhaïl TCHEKOMASOV", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-06-01", + riskLevel: "high", + tags: ["RRN", "France", "faux-média", "désinformation-Ukraine"] + }, + { + domain: "newsroad.online", + matchType: "exact", + reason: "Infrastructure parallèle à RRN créée le 6 avril 2022, publie des articles en plusieurs langues et partage des caricatures pro-russes. Enregistré par Andreï CHOUBOTCHKINE", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-04-06", + riskLevel: "high", + tags: ["RRN", "multi-langue", "caricatures", "désinformation-Ukraine"] + }, + { + domain: "memhouse.online", + matchType: "exact", + reason: "Site créé le 15 avril 2022, banque de caricatures anti-occidentales et pro-russes utilisées dans la campagne RRN. Enregistré par Andreï CHOUBOTCHKINE", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-04-15", + riskLevel: "high", + tags: ["RRN", "caricatures", "propagande-visuelle"] + }, + { + domain: "truemaps.info", + matchType: "exact", + reason: "Site créé le 30 juin 2022, carte interactive accusant les pays fournisseurs d'armes à l'Ukraine de tuer des enfants dans le Donbass. Code source en cyrillique", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-06-30", + riskLevel: "high", + tags: ["RRN", "propagande-émotionnelle", "désinformation-Ukraine"] + }, + { + domain: "tribunalukraine.info", + matchType: "exact", + reason: "Site créé le 5 octobre 2022, publie des articles sur de supposés crimes de guerre ukrainiens. Prétend être administré par des allemands", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-10-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "désinformation-Ukraine", "crimes-guerre-fake"] + }, + { + domain: "ukraine-inc.info", + matchType: "exact", + reason: "Site créé le 11 mars 2023, héberge la série de dessins animés 'Ukraine Cocaïne' anti-Zelensky. Serveur hébergé en Russie, relayé massivement par les canaux Telegram russes", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-03-11", + riskLevel: "high", + tags: ["RRN", "dessin-animé", "anti-Zelensky", "désinformation-Ukraine"] + }, + + // ===== FAUX SITES D'ACTUALITÉ FRANCOPHONES ===== + { + domain: "lavirgule.news", + matchType: "exact", + reason: "Faux média francophone 'La Virgule' créé le 24 février 2023, critiques du gouvernement français et propagande pro-russe. Primo-diffuseur d'Ukraine Cocaïne", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02-24", + riskLevel: "high", + tags: ["RRN", "France", "faux-média", "désinformation-Ukraine"] + }, + { + domain: "allons-y.social", + matchType: "exact", + reason: "Faux média francophone créé le 24 février 2023, articles sur la politique française avec éléments de langage russes. Erreurs de traduction cyrillique visibles", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02-24", + riskLevel: "high", + tags: ["RRN", "France", "faux-média", "désinformation-Ukraine"] + }, + { + domain: "candidat.news", + matchType: "exact", + reason: "Faux média francophone créé le 24 février 2023, messages d'erreur en russe révélant l'origine russe du site", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02-24", + riskLevel: "high", + tags: ["RRN", "France", "faux-média"] + }, + { + domain: "notrepays.today", + matchType: "exact", + reason: "Faux média francophone créé le 24 février 2023, hébergé sur le même serveur que lavirgule.news", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02-24", + riskLevel: "high", + tags: ["RRN", "France", "faux-média"] + }, + { + domain: "franceeteu.today", + matchType: "exact", + reason: "Faux média francophone créé le 24 février 2023, hébergé sur le même serveur que lavirgule.news", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02-24", + riskLevel: "high", + tags: ["RRN", "France", "faux-média"] + }, + { + domain: "librelepresse.fr", + matchType: "exact", + reason: "Faux site d'actualité francophone, publie des articles traduits du média RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "France", "faux-média"] + }, + + // ===== AUTRES FAUX SITES D'ACTUALITÉ (NON-FRANÇAIS) ===== + { + domain: "weltereignisse365.de", + matchType: "exact", + reason: "Faux site d'actualité allemand, publie du contenu RRN traduit", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "Allemagne", "faux-média"] + }, + { + domain: "viedo-klis.lv", + matchType: "exact", + reason: "Faux site d'actualité letton, publie du contenu RRN traduit", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "Lettonie", "faux-média"] + }, + { + domain: "libera-stampa.it", + matchType: "exact", + reason: "Faux site d'actualité italien, publie du contenu RRN traduit", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "Italie", "faux-média"] + }, + + // ===== TYPOSQUATTING - MÉDIAS FRANÇAIS ===== + { + domain: "leparisien.ltd", + matchType: "exact", + reason: "Typosquatting du Parisien, au moins 49 faux articles identifiés diffusant de la désinformation pro-russe", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "France", "typosquatting", "Le-Parisien"] + }, + { + domain: "20minuts.com", + matchType: "exact", + reason: "Typosquatting de 20 Minutes (faute d'orthographe délibérée), 7 faux articles identifiés", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "France", "typosquatting", "20-Minutes"] + }, + { + domain: "lemonde.ltd", + matchType: "exact", + reason: "Typosquatting du Monde, au moins 1 faux article identifié", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "France", "typosquatting", "Le-Monde"] + }, + { + domain: "lefigaro.me", + matchType: "exact", + reason: "Typosquatting du Figaro à partir du 8 juin 2023, au moins 1 faux article identifié", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-06-08", + riskLevel: "high", + tags: ["RRN", "France", "typosquatting", "Le-Figaro"] + }, + + // ===== TYPOSQUATTING - SITES GOUVERNEMENTAUX ===== + { + domain: "diplomatie.gouv.fm", + matchType: "exact", + reason: "Typosquatting du site du ministère de l'Europe et des Affaires étrangères français, faux communiqué sur une taxe de sécurité pour financer l'Ukraine", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-05-29", + riskLevel: "high", + tags: ["RRN", "France", "typosquatting", "gouvernement", "MEAE"] + }, + { + domain: "bmi.bund.pe", + matchType: "exact", + reason: "Typosquatting du site du ministère de l'intérieur allemand, faux communiqué sur l'obligation d'accueillir des réfugiés ukrainiens", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-05-29", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting", "gouvernement"] + }, + + // ===== TYPOSQUATTING - MÉDIAS ALLEMANDS ===== + { + domain: "bild.work", + matchType: "exact", + reason: "Typosquatting du média allemand Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "spiegel.ltd", + matchType: "exact", + reason: "Typosquatting du média allemand Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "sueddeutsche.ltd", + matchType: "exact", + reason: "Typosquatting du média allemand Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "welt.ltd", + matchType: "exact", + reason: "Typosquatting du média allemand Die Welt", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting", "Die-Welt"] + }, + { + domain: "faz.ltd", + matchType: "exact", + reason: "Typosquatting du média allemand FAZ", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting", "FAZ"] + }, + { + domain: "tagesspiegel.ltd", + matchType: "exact", + reason: "Typosquatting du média allemand Tagesspiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "high", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + + // ===== TYPOSQUATTING - AUTRES MÉDIAS INTERNATIONAUX ===== + { + domain: "dailymail.top", + matchType: "exact", + reason: "Typosquatting du Daily Mail britannique", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Royaume-Uni", "typosquatting", "Daily-Mail"] + }, + { + domain: "repubblica.life", + matchType: "exact", + reason: "Typosquatting du média italien La Repubblica", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Italie", "typosquatting", "La-Repubblica"] + }, + { + domain: "ansa.ltd", + matchType: "exact", + reason: "Typosquatting de l'agence italienne ANSA", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Italie", "typosquatting", "ANSA"] + }, + { + domain: "delfi.life", + matchType: "exact", + reason: "Typosquatting du média balte Delfi", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Pays-Baltes", "typosquatting", "Delfi"] + }, + { + domain: "rbk.media", + matchType: "exact", + reason: "Typosquatting du média russe RBK", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Russie", "typosquatting", "RBK"] + }, + { + domain: "obozrevatel.ltd", + matchType: "exact", + reason: "Typosquatting du média ukrainien Obozrevatel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "Ukraine", "typosquatting"] + }, + { + domain: "washingtonpost.ltd", + matchType: "exact", + reason: "Typosquatting du Washington Post", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "États-Unis", "typosquatting", "Washington-Post"] + }, + { + domain: "albayan.me", + matchType: "exact", + reason: "Typosquatting du média émirati Al Bayan", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "Émirats-Arabes-Unis", "typosquatting"] + }, + { + domain: "gulfnews.ltd", + matchType: "exact", + reason: "Typosquatting de Gulf News", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "Émirats-Arabes-Unis", "typosquatting"] + }, + { + domain: "jewishjournal.info", + matchType: "exact", + reason: "Typosquatting du Jewish Journal", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "Israël", "typosquatting"] + }, + { + domain: "mako.news", + matchType: "exact", + reason: "Typosquatting du média israélien Mako", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "Israël", "typosquatting"] + }, + { + domain: "theliberal.net", + matchType: "exact", + reason: "Typosquatting d'un média libéral", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "typosquatting"] + }, + + // ===== DOMAINES DE REDIRECTION (INFRASTRUCTURE TECHNIQUE) ===== + { + domain: "urlbox.online", + matchType: "exact", + reason: "Raccourcisseur d'URL utilisé pour masquer les destinations vers les sites typosquattés. Enregistré par Andreï CHOUBOTCHKINE", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-09", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique"] + }, + { + domain: "marvelgoodies.com", + matchType: "exact", + reason: "Domaine pivot permanent utilisé pour les redirections vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique"] + }, + { + domain: "bighorn-advisors.com", + matchType: "exact", + reason: "Domaine pivot permanent utilisé pour les redirections vers les sites RRN, avec geofencing", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique", "geofencing"] + }, + { + domain: "gitver.com", + matchType: "exact", + reason: "Domaine pivot permanent utilisé pour les redirections vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique"] + }, + { + domain: "raremotion.com", + matchType: "exact", + reason: "Domaine pivot permanent utilisé pour les redirections vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique"] + }, + { + domain: "gooddefr.com", + matchType: "exact", + reason: "Domaine pivot permanent utilisé pour les redirections vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "high", + tags: ["RRN", "redirecteur", "infrastructure-technique"] + }, + + // ===== DOMAINES JETABLES DE REDIRECTION (échantillon des 130+ identifiés) ===== + { + domain: "michaelplaxico.com", + matchType: "exact", + reason: "Domaine jetable utilisé dans les publications sponsorisées Facebook pour redirection vers RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable", "Facebook-ads"] + }, + { + domain: "google-seo-top.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable"] + }, + { + domain: "nexusfall.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable"] + }, + { + domain: "swiftdawn.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable"] + }, + { + domain: "topsnoep.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable"] + }, + { + domain: "americanconservativegazette.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable", "États-Unis"] + }, + { + domain: "americanliberalmedia.com", + matchType: "exact", + reason: "Domaine jetable utilisé pour redirection vers les sites RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2023-02", + riskLevel: "medium", + tags: ["RRN", "redirecteur-jetable", "États-Unis"] + }, + + // ===== AUTRES VARIANTES DE TYPOSQUATTING (échantillon des 353 domaines) ===== + { + domain: "blld.live", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.pics", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.live", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.asia", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.vip", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.eu.com", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.llc", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.expert", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "bild.ws", + matchType: "exact", + reason: "Variante de typosquatting de Bild", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Bild"] + }, + { + domain: "welt.tours", + matchType: "exact", + reason: "Variante de typosquatting de Die Welt", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Die-Welt"] + }, + { + domain: "welt.ws", + matchType: "exact", + reason: "Variante de typosquatting de Die Welt", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Die-Welt"] + }, + { + domain: "welt.media", + matchType: "exact", + reason: "Variante de typosquatting de Die Welt", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Die-Welt"] + }, + { + domain: "spiegel.today", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.fun", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.quest", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.ink", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.pro", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.co.com", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.agency", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.work", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegel.cab", + matchType: "exact", + reason: "Variante de typosquatting de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegelr.live", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegelr.today", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegelr.life", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegeli.life", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegeli.live", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "spiegeli.today", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Der Spiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "Der-Spiegel"] + }, + { + domain: "sueddeutsche.online", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "sueddeutsche.life", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "sueddeutsche.today", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "sueddeutsche.me", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "sueddeutsche.cc", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "sueddeutsche.co", + matchType: "exact", + reason: "Variante de typosquatting de Süddeutsche Zeitung", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-online.life", + matchType: "exact", + reason: "Typosquatting de T-Online (média allemand)", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "tonline.cfd", + matchType: "exact", + reason: "Typosquatting de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "tonline.life", + matchType: "exact", + reason: "Typosquatting de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "tonline.today", + matchType: "exact", + reason: "Typosquatting de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinl.life", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinl.live", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinl.today", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinr.life", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinr.live", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "t-onlinr.today", + matchType: "exact", + reason: "Typosquatting avec faute d'orthographe de T-Online", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "faz.agency", + matchType: "exact", + reason: "Variante de typosquatting de FAZ", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "FAZ"] + }, + { + domain: "faz.life", + matchType: "exact", + reason: "Variante de typosquatting de FAZ", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting", "FAZ"] + }, + { + domain: "tagesspiegel.co", + matchType: "exact", + reason: "Variante de typosquatting de Tagesspiegel", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "nd-aktuell.net", + matchType: "exact", + reason: "Typosquatting du média allemand Neues Deutschland", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "nd-aktuell.pro", + matchType: "exact", + reason: "Variante de typosquatting de Neues Deutschland", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "nd-aktuell.co", + matchType: "exact", + reason: "Variante de typosquatting de Neues Deutschland", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne", "typosquatting"] + }, + { + domain: "dailymail.cam", + matchType: "exact", + reason: "Variante de typosquatting du Daily Mail", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Royaume-Uni", "typosquatting", "Daily-Mail"] + }, + { + domain: "dailymail.cfd", + matchType: "exact", + reason: "Variante de typosquatting du Daily Mail", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Royaume-Uni", "typosquatting", "Daily-Mail"] + }, + { + domain: "theguardian.co.com", + matchType: "exact", + reason: "Typosquatting du Guardian britannique", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Royaume-Uni", "typosquatting", "The-Guardian"] + }, + { + domain: "delfi.today", + matchType: "exact", + reason: "Variante de typosquatting de Delfi", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Pays-Baltes", "typosquatting", "Delfi"] + }, + { + domain: "delfi.top", + matchType: "exact", + reason: "Variante de typosquatting de Delfi", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Pays-Baltes", "typosquatting", "Delfi"] + }, + { + domain: "delfl.cc", + matchType: "exact", + reason: "Variante avec faute d'orthographe de Delfi", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Pays-Baltes", "typosquatting", "Delfi"] + }, + { + domain: "lsm.li", + matchType: "exact", + reason: "Typosquatting d'un média balte", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Pays-Baltes", "typosquatting"] + }, + { + domain: "rbk.kiev.ua", + matchType: "exact", + reason: "Typosquatting de RBK ciblant l'Ukraine", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Ukraine", "typosquatting", "RBK"] + }, + { + domain: "rbk.today", + matchType: "exact", + reason: "Variante de typosquatting de RBK", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Russie", "typosquatting", "RBK"] + }, + { + domain: "reuters.cfd", + matchType: "exact", + reason: "Typosquatting de Reuters", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "international", "typosquatting", "Reuters"] + }, + { + domain: "obozrevatels.com", + matchType: "exact", + reason: "Variante de typosquatting d'Obozrevatel (Ukraine)", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Ukraine", "typosquatting"] + }, + { + domain: "schlauespiel.de", + matchType: "exact", + reason: "Domaine lié à la campagne RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne"] + }, + { + domain: "elfpress.info", + matchType: "exact", + reason: "Domaine lié à la campagne RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN"] + }, + { + domain: "zestiftung.com", + matchType: "exact", + reason: "Domaine lié à la campagne RRN", + source: "VIGINUM", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf", + identifiedDate: "2022-05", + riskLevel: "medium", + tags: ["RRN", "Allemagne"] + } +]; + +// Export pour utilisation dans d'autres modules +if (typeof module !== 'undefined' && module.exports) { + module.exports = rrnCampaignDomains; +} + +// Note: Le rapport VIGINUM identifie 353 domaines au total. +// Cette liste contient les domaines principaux et les plus significatifs. +// Les 130+ domaines jetables de redirection supplémentaires sont disponibles +// dans l'Annexe 4 du rapport original. \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/TemplateOPS.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/TemplateOPS.js new file mode 100644 index 0000000..cbc0b9a --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/TemplateOPS.js @@ -0,0 +1,169 @@ +// DIMA - Template pour nouvelle base de données d'opération +// REMPLACEZ "OPERATION_NAME" par le nom de votre opération (ex: Doppelganger, Portal_Kombat, etc.) + +/** + * INSTRUCTIONS D'UTILISATION + * ========================== + * + * 1. Copiez ce fichier et renommez-le (ex: Doppelganger.js) + * 2. Remplacez tous les "OPERATION_NAME" par le nom de l'opération + * 3. Remplissez les domaines dans le tableau + * 4. Chargez ce fichier AVANT suspiciousSites.js dans votre HTML + * + * EXEMPLE: + * + * + * + */ + +// Nom de la variable globale (à adapter selon votre opération) +// Exemples: +// - copycopDomains (déjà existant) +// - doppelgangerDomains +// - portalKombatDomains +// - yourOperationDomains + +const OPERATION_NAMEDomains = [ + // ===== EXEMPLE D'ENTRÉE ===== + { + domain: "example-fake-news.com", + matchType: "exact", // "exact", "contains", ou "pattern" + reason: "Site identifié dans l'opération [NOM], diffusant de la désinformation ciblée", + source: "Nom de l'organisation source (ex: EU DisinfoLab, DFRLab, etc.)", + reportUrl: "https://lien-vers-le-rapport-complet.com", + identifiedDate: "2025-01-15", // Format: YYYY-MM-DD + riskLevel: "high", // "high", "medium", ou "low" + tags: [ + "OPERATION_NAME", // Tag obligatoire : nom de l'opération + "Russie", // Origine géographique si connue + "USA", // Pays ciblé + "Anti-Ukraine", // Thématique + "Élections" // Type de campagne + ] + }, + + // ===== AJOUTEZ VOS DOMAINES ICI ===== + + /* + // Template à copier pour chaque nouveau domaine: + { + domain: "votre-domaine.com", + matchType: "exact", + reason: "Description précise de la raison", + source: "Organisation source", + reportUrl: "https://...", + identifiedDate: "YYYY-MM-DD", + riskLevel: "high|medium|low", + tags: ["OPERATION_NAME", "tag1", "tag2"] + }, + */ + +]; + +// ============================================================================= +// FONCTIONS UTILITAIRES (OPTIONNELLES) +// ============================================================================= + +/** + * Ces fonctions sont optionnelles mais recommandées pour faciliter + * l'utilisation de votre base de données indépendamment du gestionnaire principal + */ + +// Filtrer par tag +function filterOPERATION_NAMEByTag(tag) { + return OPERATION_NAMEDomains.filter(d => d.tags.includes(tag)); +} + +// Filtrer par niveau de risque +function filterOPERATION_NAMEByRiskLevel(level) { + return OPERATION_NAMEDomains.filter(d => d.riskLevel === level); +} + +// Obtenir tous les tags uniques +function getOPERATION_NAMETags() { + const allTags = new Set(); + OPERATION_NAMEDomains.forEach(d => { + d.tags.forEach(tag => allTags.add(tag)); + }); + return Array.from(allTags).sort(); +} + +// Obtenir les statistiques +function getOPERATION_NAMEStats() { + return { + total: OPERATION_NAMEDomains.length, + highRisk: OPERATION_NAMEDomains.filter(d => d.riskLevel === "high").length, + mediumRisk: OPERATION_NAMEDomains.filter(d => d.riskLevel === "medium").length, + lowRisk: OPERATION_NAMEDomains.filter(d => d.riskLevel === "low").length, + tags: getOPERATION_NAMETags() + }; +} + +// ============================================================================= +// EXPORTS ET DISPONIBILITÉ GLOBALE +// ============================================================================= + +// Export pour Node.js / modules +if (typeof module !== 'undefined' && module.exports) { + module.exports = { + OPERATION_NAMEDomains, + filterOPERATION_NAMEByTag, + filterOPERATION_NAMEByRiskLevel, + getOPERATION_NAMETags, + getOPERATION_NAMEStats + }; +} + +// Disponibilité globale pour le navigateur +if (typeof window !== 'undefined') { + window.OPERATION_NAMEDomains = OPERATION_NAMEDomains; + window.OPERATION_NAMEUtils = { + filterByTag: filterOPERATION_NAMEByTag, + filterByRiskLevel: filterOPERATION_NAMEByRiskLevel, + getTags: getOPERATION_NAMETags, + getStats: getOPERATION_NAMEStats + }; +} + +// Log de chargement +console.log(`Liste OPERATION_NAME chargée: ${OPERATION_NAMEDomains.length} domaines identifiés`); +if (OPERATION_NAMEDomains.length > 0) { + console.log("Statistiques OPERATION_NAME:", getOPERATION_NAMEStats()); +} + +// ============================================================================= +// GUIDE DES TAGS RECOMMANDÉS +// ============================================================================= + +/** + * TAGS OBLIGATOIRES: + * - Le nom de votre opération (ex: "Doppelganger", "Portal_Kombat") + * + * TAGS GÉOGRAPHIQUES (origine): + * - Russie, Chine, Iran, Corée_du_Nord, etc. + * + * TAGS GÉOGRAPHIQUES (cible): + * - USA, France, Canada, UK, Allemagne, Ukraine, etc. + * - Sites-US, Sites-France, Sites-Canada (pour collections de sites locaux) + * + * TAGS THÉMATIQUES: + * - Anti-Ukraine + * - Élections + * - COVID-19 + * - Climat + * - Immigration + * - Santé + * + * TAGS TECHNIQUES: + * - LLM (contenu généré par IA) + * - Deepfake + * - Usurpation-Identité + * - Bot-Network + * - Infrastructure + * + * TAGS DE MÉTHODE: + * - Désinformation-Ciblée + * - Amplification-Artificielle + * - Multi-Langues + * - Coordination-Cross-Platform + */ \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/manifest.json b/plugin/plugin_chrome/releases/Plugin-dima/manifest.json index 5e19395..604f585 100644 --- a/plugin/plugin_chrome/releases/Plugin-dima/manifest.json +++ b/plugin/plugin_chrome/releases/Plugin-dima/manifest.json @@ -1,23 +1,37 @@ { "manifest_version": 3, - "name": "Analyseur DIMA - M82 Project", - "version": "1.1", - "description": "Plugin d'analyse de manipulation cognitive selon la matrice DIMA par M82 Project", - "permissions": ["activeTab", "storage"], + "name": "DIMA - Digital Influence Manipulation Analyzer", + "version": "2.0.0", + "description": "Plugin d'analyse de manipulation cognitive selon la matrice DIMA par M82 Project, détecte et analyse les sites suspects identifiés dans des rapports de désinformation", + "permissions": [ + "activeTab", + "storage" + ], + + "host_permissions": [ + "" + ], + "content_scripts": [ { "matches": [""], "js": [ + "data/databases/Copycop.js", + "data/databases/PortalKombat.js", + "data/databases/RRN.js", "data/techniques.js", "data/keywords.js", "modules/contentExtractor.js", + "modules/suspiciousSitesManager.js", "modules/techniqueAnalyzer.js", "modules/uiManager.js", "content.js" - ] + ], + "run_at": "document_end" } ], - "action": { + + "action": { "default_title": "Analyse DIMA - M82 Project" }, "icons": { diff --git a/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js b/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js new file mode 100644 index 0000000..75d2907 --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js @@ -0,0 +1,310 @@ +// DIMA - Gestionnaire Central de Sites Suspects +// Ce fichier charge et agrège toutes les bases de données de domaines suspects + +/** + * Gestionnaire centralisé des sites suspects + * Charge automatiquement toutes les bases de données disponibles + * et fournit une API unifiée pour vérifier les sites + */ +class SuspiciousSitesManager { + constructor() { + this.sources = new Map(); + this.allSites = []; + this.stats = { + totalSites: 0, + byRiskLevel: { high: 0, medium: 0, low: 0 }, + bySources: {}, + byTags: {} + }; + + this.init(); + } + + /** + * Initialise le gestionnaire en chargeant toutes les sources disponibles + */ + init() { + console.log('🛡️ DIMA: Initialisation du gestionnaire de sites suspects...'); + + // Détecter et charger les sources disponibles + this.detectAndLoadSources(); + + // Agréger tous les sites + this.aggregateAllSites(); + + // Calculer les statistiques + this.calculateStats(); + + console.log(`✅ DIMA: ${this.allSites.length} sites suspects chargés depuis ${this.sources.size} source(s)`); + this.logStats(); + } + + /** + * Détecte et charge automatiquement toutes les sources disponibles + */ + detectAndLoadSources() { + // Source 1: CopyCop (Recorded Future) + if (typeof copycopDomains !== 'undefined' && Array.isArray(copycopDomains)) { + this.registerSource('CopyCop', copycopDomains, { + name: 'Opération CopyCop', + description: 'Réseau russe de sites fictifs et de désinformation', + organization: 'Recorded Future - Insikt Group', + reportUrl: 'https://www.recordedfuture.com/research/cta-ru-2025-0917', + reportDate: '2025-09-17' + }); + console.log(` ✓ Source CopyCop chargée: ${copycopDomains.length} domaines`); + } + + // Source 2: RRN (VIGINUM) + if (typeof rrnDomains !== 'undefined' && Array.isArray(rrnDomains)) { + this.registerSource('RRN', rrnDomains, { + name: 'Réseau RRN', + description: 'Réseau de faux médias et infrastructure de désinformation pro-russe', + organization: 'VIGINUM', + reportUrl: 'https://www.sgdsn.gouv.fr/files/files/20230619_NP_VIGINUM_RAPPORT-CAMPAGNE-RRN_VF_0.pdf', + reportDate: '2023-06-19' + }); + console.log(` ✓ Source RRN chargée: ${rrnDomains.length} domaines`); + } + + // Source 3: Doppelganger (à venir) + if (typeof doppelgangerDomains !== 'undefined' && Array.isArray(doppelgangerDomains)) { + this.registerSource('Doppelganger', doppelgangerDomains, { + name: 'Opération Doppelganger', + description: 'Sites usurpant l\'identité de médias légitimes', + organization: 'À définir', + reportUrl: '', + reportDate: '' + }); + console.log(` ✓ Source Doppelganger chargée: ${doppelgangerDomains.length} domaines`); + } + + // Source 4: Portal Kombat (à venir) + if (typeof portalKombatDomains !== 'undefined' && Array.isArray(portalKombatDomains)) { + this.registerSource('PortalKombat', portalKombatDomains, { + name: 'Opération Portal Kombat', + description: 'Réseau d\'influence', + organization: 'À définir', + reportUrl: '', + reportDate: '' + }); + console.log(` ✓ Source Portal Kombat chargée: ${portalKombatDomains.length} domaines`); + } + + // Avertissement si aucune source n'est chargée + if (this.sources.size === 0) { + console.warn('⚠️ DIMA: Aucune base de données de sites suspects n\'a été chargée'); + console.warn(' Vérifiez que les fichiers de bases de données sont correctement chargés avant ce gestionnaire'); + } + } + + /** + * Enregistre une nouvelle source de données + */ + registerSource(sourceName, domains, metadata) { + this.sources.set(sourceName, { + domains: domains, + metadata: metadata, + count: domains.length + }); + } + + /** + * Agrège tous les sites de toutes les sources + */ + aggregateAllSites() { + this.allSites = []; + + for (const [sourceName, sourceData] of this.sources) { + this.allSites.push(...sourceData.domains); + } + } + + /** + * Calcule les statistiques globales + */ + calculateStats() { + this.stats.totalSites = this.allSites.length; + + // Reset stats + this.stats.byRiskLevel = { high: 0, medium: 0, low: 0 }; + this.stats.bySources = {}; + this.stats.byTags = {}; + + // Compter par niveau de risque et tags + this.allSites.forEach(site => { + // Par niveau de risque + if (site.riskLevel) { + this.stats.byRiskLevel[site.riskLevel] = (this.stats.byRiskLevel[site.riskLevel] || 0) + 1; + } + + // Par source + if (site.source) { + this.stats.bySources[site.source] = (this.stats.bySources[site.source] || 0) + 1; + } + + // Par tags + if (site.tags && Array.isArray(site.tags)) { + site.tags.forEach(tag => { + this.stats.byTags[tag] = (this.stats.byTags[tag] || 0) + 1; + }); + } + }); + } + + /** + * Affiche les statistiques dans la console + */ + logStats() { + console.log('📊 Statistiques:'); + console.log(` Total: ${this.stats.totalSites} sites`); + console.log(` Risque élevé: ${this.stats.byRiskLevel.high || 0}`); + console.log(` Risque moyen: ${this.stats.byRiskLevel.medium || 0}`); + console.log(` Risque faible: ${this.stats.byRiskLevel.low || 0}`); + console.log(` Sources: ${Object.keys(this.stats.bySources).length}`); + } + + /** + * Vérifie si une URL correspond à un site suspect + * @param {string} url - L'URL à vérifier + * @returns {Object} Résultat de la vérification + */ + checkSite(url) { + try { + const urlObj = new URL(url); + const hostname = urlObj.hostname.toLowerCase(); + + for (const site of this.allSites) { + let isMatch = false; + + switch (site.matchType) { + case "exact": + isMatch = hostname === site.domain.toLowerCase() || + hostname === `www.${site.domain.toLowerCase()}`; + break; + + case "contains": + isMatch = hostname.includes(site.domain.toLowerCase()); + break; + + case "pattern": + try { + const regex = new RegExp(site.domain, "i"); + isMatch = regex.test(hostname); + } catch (e) { + console.error(`DIMA: Pattern regex invalide pour ${site.domain}:`, e); + } + break; + } + + if (isMatch) { + return { + isSuspicious: true, + siteInfo: site, + riskConfig: this.getRiskConfig(site.riskLevel), + matchedHostname: hostname + }; + } + } + + return { isSuspicious: false }; + } catch (error) { + console.error("DIMA: Erreur lors de la vérification du site suspect:", error); + return { isSuspicious: false, error: error.message }; + } + } + + /** + * Retourne la configuration visuelle pour un niveau de risque + */ + getRiskConfig(riskLevel) { + const RISK_LEVELS = { + high: { + color: "#c0392b", + icon: "⚠️", + label: "Risque Élevé", + message: "Ce site a été identifié comme diffusant de la désinformation de manière systématique." + }, + medium: { + color: "#e67e22", + icon: "⚡", + label: "Vigilance Requise", + message: "Ce site a été signalé pour des pratiques douteuses." + }, + low: { + color: "#f39c12", + icon: "ℹ️", + label: "À Surveiller", + message: "Ce site présente des caractéristiques suspectes." + } + }; + + return RISK_LEVELS[riskLevel] || RISK_LEVELS.low; + } + + /** + * Retourne les statistiques + */ + getStats() { + return this.stats; + } + + /** + * Retourne les informations sur toutes les sources chargées + */ + getSourcesInfo() { + const sourcesInfo = []; + for (const [sourceName, sourceData] of this.sources) { + sourcesInfo.push({ + name: sourceName, + count: sourceData.count, + ...sourceData.metadata + }); + } + return sourcesInfo; + } + + /** + * Recherche des sites par tag + */ + searchByTag(tag) { + return this.allSites.filter(site => + site.tags && site.tags.includes(tag) + ); + } + + /** + * Recherche des sites par source + */ + searchBySource(sourceName) { + return this.allSites.filter(site => + site.source === sourceName + ); + } +} + +// Initialisation automatique du gestionnaire +let suspiciousSitesManager; + +// Initialiser après le chargement de toutes les bases de données +if (typeof window !== 'undefined') { + // Dans le navigateur, initialiser après un court délai pour laisser les autres fichiers se charger + setTimeout(() => { + suspiciousSitesManager = new SuspiciousSitesManager(); + + // Rendre disponible globalement + window.suspiciousSitesManager = suspiciousSitesManager; + + // Pour compatibilité avec l'ancien code, exposer aussi checkSuspiciousSite + window.checkSuspiciousSite = (url) => suspiciousSitesManager.checkSite(url); + + // Exposer aussi les statistiques et infos + window.getSuspiciousSitesStats = () => suspiciousSitesManager.getStats(); + window.getSuspiciousSitesSourcesInfo = () => suspiciousSitesManager.getSourcesInfo(); + }, 100); +} + +// Export pour Node.js si nécessaire +if (typeof module !== 'undefined' && module.exports) { + module.exports = SuspiciousSitesManager; +} \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/modules/uiManager.js b/plugin/plugin_chrome/releases/Plugin-dima/modules/uiManager.js index 57b2ee3..5f24c3f 100644 --- a/plugin/plugin_chrome/releases/Plugin-dima/modules/uiManager.js +++ b/plugin/plugin_chrome/releases/Plugin-dima/modules/uiManager.js @@ -9,6 +9,7 @@ class UIManager { this.buttonCreated = false; this.analysisResults = null; this.pageType = 'general'; + this.suspiciousSiteCheck = null; } log(message, data = null) { @@ -30,12 +31,20 @@ class UIManager { console.error('DIMA: Aucun résultat d\'analyse disponible pour créer le bouton'); return; } + + // Vérifier si le site est suspect + this.suspiciousSiteCheck = window.checkSuspiciousSite ? + window.checkSuspiciousSite(window.location.href) : + { isSuspicious: false }; + try { // Supprimer bouton existant document.getElementById('dima-btn')?.remove(); + document.getElementById('dima-suspicious-alert')?.remove(); if (this.buttonCreated) return; + // Créer le bouton principal const button = document.createElement('div'); button.id = 'dima-btn'; @@ -80,6 +89,12 @@ class UIManager { }); document.body?.appendChild(button); + + // Créer l'alerte de site suspect si nécessaire + if (this.suspiciousSiteCheck.isSuspicious) { + this.createSuspiciousSiteAlert(); + } + this.buttonCreated = true; this.log('Bouton créé avec succès'); @@ -88,6 +103,227 @@ class UIManager { } } + createSuspiciousSiteAlert() { + const { siteInfo, riskConfig } = this.suspiciousSiteCheck; + + const alert = document.createElement('div'); + alert.id = 'dima-suspicious-alert'; + + alert.innerHTML = ` +
+ ${riskConfig.icon} +
+
+ ${riskConfig.label} +
+
+ Vigilance : ce site appartient à un dispositif de manipulation de l'information identifié. +
+ +
+ +
+ `; + + alert.style.cssText = ` + position: fixed !important; + top: 70px !important; + right: 20px !important; + z-index: 999998 !important; + background: linear-gradient(135deg, ${riskConfig.color}, ${this.adjustColor(riskConfig.color, -15)}) !important; + color: white !important; + padding: 16px !important; + border-radius: 12px !important; + max-width: 350px !important; + font-family: 'Segoe UI', Arial, sans-serif !important; + box-shadow: 0 6px 20px rgba(0,0,0,0.3) !important; + border: 2px solid rgba(255,255,255,0.2) !important; + animation: slideInRight 0.4s ease-out !important; + backdrop-filter: blur(10px) !important; + `; + + document.body?.appendChild(alert); + + // Événements + document.getElementById('dima-suspicious-details')?.addEventListener('click', () => { + this.showSuspiciousSiteDetails(); + }); + + document.getElementById('dima-suspicious-close')?.addEventListener('click', () => { + alert.remove(); + }); + + // Hover effects + const detailsBtn = document.getElementById('dima-suspicious-details'); + if (detailsBtn) { + detailsBtn.addEventListener('mouseenter', () => { + detailsBtn.style.transform = 'translateY(-1px)'; + detailsBtn.style.boxShadow = '0 2px 8px rgba(0,0,0,0.2)'; + }); + detailsBtn.addEventListener('mouseleave', () => { + detailsBtn.style.transform = 'translateY(0)'; + detailsBtn.style.boxShadow = 'none'; + }); + } + + const closeBtn = document.getElementById('dima-suspicious-close'); + if (closeBtn) { + closeBtn.addEventListener('mouseenter', () => { + closeBtn.style.opacity = '1'; + }); + closeBtn.addEventListener('mouseleave', () => { + closeBtn.style.opacity = '0.7'; + }); + } + } + + showSuspiciousSiteDetails() { + const { siteInfo, riskConfig } = this.suspiciousSiteCheck; + + // Créer modal avec détails + const detailsModal = document.createElement('div'); + detailsModal.id = 'dima-suspicious-details-modal'; + + detailsModal.style.cssText = ` + position: fixed !important; + top: 0 !important; + left: 0 !important; + width: 100% !important; + height: 100% !important; + background: rgba(0,0,0,0.75) !important; + backdrop-filter: blur(5px) !important; + z-index: 10000000 !important; + display: flex !important; + align-items: center !important; + justify-content: center !important; + font-family: 'Segoe UI', Arial, sans-serif !important; + animation: fadeIn 0.3s ease-out !important; + `; + + const logoUrl = chrome.runtime.getURL('M82-logo-16.png'); + + detailsModal.innerHTML = ` +
+ + +
+
+ M82 Project +

Site Suspect Identifié

+
+
+ ${riskConfig.icon} ${riskConfig.label} +
+
+ + +
+
+

⚠️ Avertissement

+

+ ${riskConfig.message} +

+
+ +
+

📋 Détails de l'identification

+
+
+ Raison : +
${siteInfo.reason}
+
+
+ Source du rapport : +
${siteInfo.source}
+
+
+ Date d'identification : +
${new Date(siteInfo.identifiedDate).toLocaleDateString('fr-FR')}
+
+ ${siteInfo.tags && siteInfo.tags.length > 0 ? ` +
+ Catégories : +
+ ${siteInfo.tags.map(tag => ` + + ${tag} + + `).join('')} +
+
+ ` : ''} +
+
+ +
+

💡 Recommandations

+
    +
  • Vérifiez les informations auprès de sources fiables
  • +
  • Consultez plusieurs sources avant de partager
  • +
  • Soyez attentif aux techniques de manipulation détectées
  • +
  • Signalez le contenu suspect si nécessaire
  • +
+
+
+ + +
+ + +
+ +
+ Base de données maintenue par + M82 Project +
+
+ `; + + detailsModal.addEventListener('click', (e) => { + if (e.target === detailsModal) detailsModal.remove(); + }); + + document.body.appendChild(detailsModal); + } + adjustColor(color, amount) { const num = parseInt(color.replace("#", ""), 16); const amt = Math.round(2.55 * amount); @@ -101,116 +337,205 @@ class UIManager { generateTooltip() { const techniques = this.analysisResults.detectedTechniques.slice(0, 3); - return `DIMA Score: ${this.analysisResults.globalScore} (${this.analysisResults.riskLevel}) + let tooltip = `DIMA Score: ${this.analysisResults.globalScore} (${this.analysisResults.riskLevel}) ${this.analysisResults.detectedTechniques.length} techniques détectées -${techniques.map(t => `• ${t.nom}`).join('\n')} -Contenu: ${this.analysisResults.contentLength} caractères`; - } - - getScoreIcon(score) { - if (score >= 75) return '🚨'; // Critique - if (score >= 50) return '⚠️'; // Élevé - if (score >= 30) return '⚡'; // Modéré - if (score >= 15) return '👀'; // Faible - return '✅'; // Très faible - } - - generateExecutiveSummary() { - const score = this.analysisResults.globalScore; - const techniqueCount = this.analysisResults.detectedTechniques.length; - const topTechniques = this.analysisResults.detectedTechniques.slice(0, 3); - - let summary = ""; - - // Évaluation générale selon le score - if (score >= 75) { - summary = `🚨 Manipulation intensive détectée : Ce contenu présente un niveau critique de techniques manipulatoires (${techniqueCount} technique${techniqueCount > 1 ? 's' : ''}). `; - } else if (score >= 50) { - summary = `⚠️ Manipulation significative : Ce contenu utilise plusieurs techniques suspectes (${techniqueCount} technique${techniqueCount > 1 ? 's' : ''}). `; - } else if (score >= 30) { - summary = `⚡ Éléments manipulatoires présents : Quelques techniques détectées nécessitent votre attention (${techniqueCount} technique${techniqueCount > 1 ? 's' : ''}). `; - } else { - summary = `👀 Faible niveau de manipulation : Peu d'éléments manipulatoires détectés (${techniqueCount} technique${techniqueCount > 1 ? 's' : ''}). `; - } - - // Analyse des phases dominantes - if (this.analysisResults.phaseScores && Object.keys(this.analysisResults.phaseScores).length > 0) { - const sortedPhases = Object.entries(this.analysisResults.phaseScores) - .sort(([,a], [,b]) => b - a) - .slice(0, 2); +${techniques.map(t => `• ${t.nom}`).join('\n')}`; - if (sortedPhases.length > 0) { - const dominantPhase = sortedPhases[0][0]; - summary += `La manipulation se concentre principalement sur la phase "${dominantPhase}" (${this.getPhaseExplanation(dominantPhase)}). `; + if (this.suspiciousSiteCheck.isSuspicious) { + tooltip += `\n\n⚠️ SITE SUSPECT IDENTIFIÉ`; } - } - - // Technique principale - if (topTechniques.length > 0) { - const mainTechnique = topTechniques[0]; - summary += `La technique dominante est ${mainTechnique.nom} avec ${mainTechnique.confidence}% de confiance. `; - // Conseil spécifique selon la technique - summary += this.getTechniqueAdvice(mainTechnique.index); - } - - return summary; + tooltip += `\nContenu: ${this.analysisResults.contentLength} caractères`; + + return tooltip; } - getPhaseEmoji(phase) { - const emojis = { - 'Detect': '👁️', - 'Informer': '📢', - 'Mémoriser': '🧠', - 'Act': '⚡' - }; - return emojis[phase] || '📍'; + generatePhaseAnalysis() { + if (!this.analysisResults || !this.analysisResults.detectedTechniques || this.analysisResults.detectedTechniques.length === 0) { + return ''; + } + + // Analyser les techniques par phase + const phaseStats = { + 'Detect': { count: 0, totalScore: 0, techniques: [], icon: '👁️', color: '#3498db' }, + 'Informer': { count: 0, totalScore: 0, techniques: [], icon: '📢', color: '#e67e22' }, + 'Mémoriser': { count: 0, totalScore: 0, techniques: [], icon: '🧠', color: '#9b59b6' }, + 'Agir': { count: 0, totalScore: 0, techniques: [], icon: '⚡', color: '#e74c3c' } + }; + + this.analysisResults.detectedTechniques.forEach(technique => { + const phase = technique.phase || 'Detect'; + if (phaseStats[phase]) { + phaseStats[phase].count++; + phaseStats[phase].totalScore += technique.weightedScore || technique.score || 0; + phaseStats[phase].techniques.push(technique); + } + }); + + // Calculer les pourcentages + const totalTechniques = this.analysisResults.detectedTechniques.length; + const totalScore = Object.values(phaseStats).reduce((sum, phase) => sum + phase.totalScore, 0); + + // Trouver la phase dominante + let dominantPhase = null; + let maxCount = 0; + Object.entries(phaseStats).forEach(([phase, stats]) => { + if (stats.count > maxCount) { + maxCount = stats.count; + dominantPhase = phase; + } + }); + + // Générer l'explication contextuelle + const explanation = this.generatePhaseExplanation(dominantPhase, phaseStats, totalTechniques); + + // Générer le HTML + return ` +
+

+ 📊 Analyse par Phase DIMA + + (Detect, Informer, Mémoriser, Agir) + +

+ + +
+
+ ${phaseStats[dominantPhase]?.icon || '💡'} +
+

+ Analyse : Phase dominante "${dominantPhase}" +

+

+ ${explanation} +

+
+
+
+ + +
+ ${Object.entries(phaseStats).map(([phase, stats]) => { + const percentage = totalTechniques > 0 ? Math.round((stats.count / totalTechniques) * 100) : 0; + const scorePercentage = totalScore > 0 ? Math.round((stats.totalScore / totalScore) * 100) : 0; + const isActive = stats.count > 0; + + return ` +
+
${stats.icon}
+
+ ${phase} +
+
+ ${stats.count} +
+
+ ${percentage}% techniques +
+ ${isActive ? ` +
+ ${scorePercentage}% du score +
+ ` : ''} +
+ `; + }).join('')} +
+ + +
+

Distribution du score par phase

+ ${Object.entries(phaseStats).map(([phase, stats]) => { + const percentage = totalScore > 0 ? (stats.totalScore / totalScore) * 100 : 0; + const displayScore = stats.totalScore.toFixed(1); + + return ` +
+
+ + ${stats.icon} ${phase} + + + ${displayScore} pts (${Math.round(percentage)}%) + +
+
+
+
+
+ `; + }).join('')} +
+ + +
+
+ + ℹ️ Comprendre les phases DIMA + +
+
+ 👁️ Detect (Détecter) : + Techniques visant à capter l'attention et identifier les cibles sensibles aux messages. +
+
+ 📢 Informer : + Techniques de transmission et cadrage de l'information pour influencer la perception. +
+
+ 🧠 Mémoriser : + Techniques d'ancrage mémoriel et de renforcement des messages dans la durée. +
+
+ ⚡ Agir : + Techniques d'incitation à l'action et de mobilisation comportementale. +
+
+
+
+
+ `; } - getPhaseColor(phase) { - const colors = { - 'Detect': '#e3f2fd', // Bleu clair - 'Informer': '#f3e5f5', // Violet clair - 'Mémoriser': '#e8f5e8', // Vert clair - 'Act': '#fff3e0' // Orange clair - }; - return colors[phase] || '#f5f5f5'; + generatePhaseExplanation(dominantPhase, phaseStats, totalTechniques) { + const explanations = { + 'Detect': `Le contenu utilise principalement des techniques de détection et captation d'attention (${phaseStats['Detect'].count}/${totalTechniques} techniques). Cela suggère une stratégie axée sur l'identification des publics réceptifs et l'accroche initiale. Le contenu cherche à attirer et cibler des audiences spécifiques.`, + + 'Informer': `Le contenu se concentre sur des techniques de transmission et cadrage de l'information (${phaseStats['Informer'].count}/${totalTechniques} techniques). L'objectif est de contrôler la perception de l'information via le choix des faits présentés, leur contextualisation, et les biais introduits dans le message.`, + + 'Mémoriser': `Le contenu privilégie des techniques de mémorisation et ancrage (${phaseStats['Mémoriser'].count}/${totalTechniques} techniques). Ces méthodes visent à inscrire durablement les messages dans la mémoire du public, souvent par répétition, simplification ou associations émotionnelles fortes.`, + + 'Agir': `Le contenu met l'accent sur des techniques d'incitation à l'action (${phaseStats['Agir'].count}/${totalTechniques} techniques). L'objectif est de mobiliser le public vers des comportements spécifiques : partage, engagement, manifestation, ou modification d'opinions et de votes.` + }; + + // Si plusieurs phases sont également représentées + const topPhases = Object.entries(phaseStats) + .filter(([_, stats]) => stats.count > 0) + .sort((a, b) => b[1].count - a[1].count) + .slice(0, 2); + + if (topPhases.length > 1 && topPhases[0][1].count === topPhases[1][1].count) { + return `Le contenu présente une stratégie équilibrée entre les phases "${topPhases[0][0]}" et "${topPhases[1][0]}" (${topPhases[0][1].count} techniques chacune). Cette combinaison indique une approche sophistiquée visant à la fois à attirer l'attention et à générer un impact durable.`; + } + + return explanations[dominantPhase] || 'Analyse de la répartition des techniques de manipulation cognitive détectées selon le modèle DIMA.'; } - getPhaseDescription(phase) { - const descriptions = { - 'Detect': 'Capter l\'attention', - 'Informer': 'Influencer ou orienter la compréhension', - 'Mémoriser': 'Ancrer l\'information', - 'Act': 'Provoquer l\'action' - }; - return descriptions[phase] || phase; - } - - getPhaseExplanation(phase) { - const explanations = { - 'Detect': 'techniques pour attirer et capter votre attention', - 'Informer': 'méthodes pour orienter votre interprétation des faits', - 'Mémoriser': 'stratégies pour ancrer certaines idées dans votre mémoire', - 'Act': 'pressions pour vous pousser à agir rapidement' - }; - return explanations[phase] || 'manipulation cognitive'; - } - - getTechniqueAdvice(techniqueIndex) { - const advices = { - 'TE0500': 'Méfiez-vous des titres sensationnalistes et vérifiez les sources.', - 'TE0132': 'Prenez du recul face aux messages alarmistes excessifs.', - 'TE0501': 'Résistez à la pression de l\'urgence et prenez le temps de réfléchir.', - 'TE0422': 'Vérifiez les qualifications réelles des "experts" cités.', - 'TE0251': 'Questionnez les affirmations sur ce que "tout le monde" pense.', - 'TE0221': 'Attention aux généralisations excessives sur des groupes.', - 'TE0212': 'Ne tirez pas de conclusions générales à partir d\'anecdotes.', - 'TE0321': 'Cherchez des sources contradictoires pour éviter le biais de confirmation.' - }; - return advices[techniqueIndex] || 'Restez critique et vérifiez les informations.'; - } - showModal() { try { this.log('Affichage du modal'); @@ -235,9 +560,33 @@ Contenu: ${this.analysisResults.contentLength} caractères`; font-family: 'Segoe UI', Arial, sans-serif !important; animation: fadeIn 0.3s ease-out !important; `; - // Récupérer l'URL du logo + const logoUrl = chrome.runtime.getURL('M82-logo-16.png'); + // Construire le contenu avec alerte site suspect si nécessaire + let suspiciousAlert = ''; + if (this.suspiciousSiteCheck.isSuspicious) { + const { riskConfig, siteInfo } = this.suspiciousSiteCheck; + suspiciousAlert = ` +
+
+ ${riskConfig.icon} +
+

${riskConfig.label}

+

+ ${riskConfig.message} +

+ +
+
+
+ `; + } + modal.innerHTML = `
@@ -257,6 +606,8 @@ Contenu: ${this.analysisResults.contentLength} caractères`;

+ ${suspiciousAlert} +
@@ -277,17 +628,7 @@ Contenu: ${this.analysisResults.contentLength} caractères`;
- - ${this.analysisResults.globalScore > 15 ? ` -
-

- ${this.getScoreIcon(this.analysisResults.globalScore)} Résumé de l'analyse -

-

- ${this.generateExecutiveSummary()} -

-
- ` : ''} + ${this.generatePhaseAnalysis()}
@@ -300,38 +641,6 @@ Contenu: ${this.analysisResults.contentLength} caractères`;
- - ${this.analysisResults.phaseScores && Object.keys(this.analysisResults.phaseScores).length > 0 ? ` -
-

📊 Répartition par phase DIMA

-
- ${Object.entries(this.analysisResults.phaseScores).map(([phase, score]) => { - const maxScore = Math.max(...Object.values(this.analysisResults.phaseScores)); - const percentage = maxScore > 0 ? (score / maxScore) * 100 : 0; - return ` -
-
- ${this.getPhaseEmoji(phase)} ${phase} -
-
-
-
-
- ${score.toFixed(1)} pts -
-
- ${this.getPhaseDescription(phase)} -
-
- `; - }).join('')} -
-
- 💡 La matrice DIMA analyse comment l'information traverse les 4 phases cognitives -
-
- ` : ''} - ${this.analysisResults.detectedTechniques.length === 0 ? `
@@ -370,7 +679,7 @@ Contenu: ${this.analysisResults.contentLength} caractères`; ${technique.matchedKeywords?.length > 0 ? `
- 🔍 Mots-clés détectés: + 🔎 Mots-clés détectés:
${technique.matchedKeywords.slice(0, 4).map(keyword => @@ -414,6 +723,10 @@ Contenu: ${this.analysisResults.contentLength} caractères`; from { transform: translateY(30px); opacity: 0; } to { transform: translateY(0); opacity: 1; } } + @keyframes slideInRight { + from { transform: translateX(100%); opacity: 0; } + to { transform: translateX(0); opacity: 1; } + } #dima-modal button:hover { transform: translateY(-1px); box-shadow: 0 4px 12px rgba(0,0,0,0.15); @@ -425,6 +738,11 @@ Contenu: ${this.analysisResults.contentLength} caractères`; modal.addEventListener('click', (e) => { if (e.target === modal) modal.remove(); }); + + // Ajouter l'événement pour le bouton des détails du site suspect + modal.querySelector('.suspicious-details-btn')?.addEventListener('click', () => { + this.showSuspiciousSiteDetails(); + }); document.body.appendChild(modal); this.log('Modal affiché'); @@ -434,5 +752,6 @@ Contenu: ${this.analysisResults.contentLength} caractères`; } } } + // Make UIManager available globally for Chrome extension -window.UIManager = UIManager; +window.UIManager = UIManager; \ No newline at end of file