From 3fce87f99b22574f253cba806f832d42d75becea Mon Sep 17 00:00:00 2001 From: BartM82 <105561997+BartM82@users.noreply.github.com> Date: Fri, 24 Oct 2025 11:33:12 +0000 Subject: [PATCH] =?UTF-8?q?Ajout=20R=C3=A9seau=20Pravda,=20Doppelganger=20?= =?UTF-8?q?et=20correction=20bug=20dans=20management=20des=20sites=20suspe?= =?UTF-8?q?cts?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../data/databases/Doppelganger.js | 1082 +++++++++++++++++ .../Plugin-dima/data/databases/Pravda.js | 710 +++++++++++ .../releases/Plugin-dima/manifest.json | 4 +- .../modules/Suspicioussitesmanager.js | 25 +- 4 files changed, 1819 insertions(+), 2 deletions(-) create mode 100644 plugin/plugin_chrome/releases/Plugin-dima/data/databases/Doppelganger.js create mode 100644 plugin/plugin_chrome/releases/Plugin-dima/data/databases/Pravda.js diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Doppelganger.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Doppelganger.js new file mode 100644 index 0000000..77a5878 --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Doppelganger.js @@ -0,0 +1,1082 @@ +// DIMA - Base de données pour l'opération Doppelganger +// Sources multiples: Wikipedia, Qurium, US DOJ, EU DisinfoLab, DFRLab + +/** + * OPÉRATION DOPPELGANGER - BASE DE DONNÉES + * ================================================== + * Campagne de désinformation sophistiquée créant des sites Web usurpant l'identité + * de sources d'information légitimes. Opérée par Social Design Agency (SDA) et Structura + * sous la direction du Kremlin (Sergei Kiriyenko, premier chef adjoint de l'administration présidentielle). + * + * Période d'activité: Mai 2022 - Présent (toujours actif) + * Cibles principales: Allemagne, France, UK, USA, Italie, Ukraine, États baltes + * Techniques: Typosquatting, LLM, géoblocage, cloaking (service Kehr), IA générative + * + * Cette base contient 100+ domaines identifiés par: + * - Qurium Media Foundation (50+ domaines, Sept 2022) + * - US Department of Justice (32 domaines saisis, Sept 2024) + * - EU DisinfoLab, DFRLab, Meta, NewsGuard, CORRECTIV + */ + +const doppelgangerDomains = [ + + // ======================================================================== + // DOMAINES ALLEMANDS - BILD (8 variantes) + // ======================================================================== + { + domain: "bild.asia", + matchType: "exact", + reason: "Clone de Bild.de, premier domaine fake identifié (12 juillet 2022)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "bild.vip", + matchType: "exact", + reason: "Clone de Bild.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "bild.eu.com", + matchType: "exact", + reason: "Clone de Bild.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-24", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "bild.llc", + matchType: "exact", + reason: "Clone de Bild.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-25", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "blld.live", + matchType: "exact", + reason: "Clone de Bild.de (typosquatting bild → blld)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-05", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "bild.pics", + matchType: "exact", + reason: "Clone de Bild.de, premier domaine créé (6 juin 2022)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-06", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "bild.work", + matchType: "exact", + reason: "Clone de Bild.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "bild.ws", + matchType: "exact", + reason: "Clone de Bild.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Bild", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES ALLEMANDS - DER SPIEGEL (10+ variantes) + // ======================================================================== + { + domain: "spiegel.agency", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-06", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.co.com", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-26", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.fun", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-18", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegeli.life", + matchType: "exact", + reason: "Clone de Spiegel.de (typosquatting spiegel → spiegeli)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-28", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.ltd", + matchType: "exact", + reason: "Clone de Spiegel.de, domaine majeur de la campagne", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-29", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.pro", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-20", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.work", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-13", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegel.cab", + matchType: "exact", + reason: "Clone de Spiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-15", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "spiegelr.today", + matchType: "exact", + reason: "Clone de Spiegel.de (typosquatting spiegel → spiegelr)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "afp-hub.com", + matchType: "exact", + reason: "Clone de Spiegel.de, saisi par le DOJ (septembre 2024)", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Der_Spiegel", "Usurpation-Identité", "DOJ-Seizure", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES ALLEMANDS - SÜDDEUTSCHE ZEITUNG (4 variantes) + // ======================================================================== + { + domain: "sueddeutsche.me", + matchType: "exact", + reason: "Clone de Sueddeutsche.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-18", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Süddeutsche_Zeitung", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "sueddeutsche.cc", + matchType: "exact", + reason: "Clone de Sueddeutsche.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Süddeutsche_Zeitung", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "sueddeutsche.co", + matchType: "exact", + reason: "Clone de Sueddeutsche.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-13", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Süddeutsche_Zeitung", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "sueddeutsche.online", + matchType: "exact", + reason: "Clone de Sueddeutsche.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-20", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Süddeutsche_Zeitung", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES ALLEMANDS - T-ONLINE (9 variantes) + // ======================================================================== + { + domain: "tonline.cfd", + matchType: "exact", + reason: "Clone de T-Online.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-18", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "tonline.life", + matchType: "exact", + reason: "Clone de T-Online.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-18", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinl.life", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting t-online → t-onlinl)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinl.live", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinl.today", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinr.life", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting t-online → t-onlinr)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-31", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinr.live", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-31", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "t-onlinr.today", + matchType: "exact", + reason: "Clone de T-Online.de (typosquatting)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-31", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "T-Online", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES ALLEMANDS - AUTRES MÉDIAS + // ======================================================================== + { + domain: "tagesspiegel.ltd", + matchType: "exact", + reason: "Clone de Tagesspiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-09", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Tagesspiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "tagesspiegel.co", + matchType: "exact", + reason: "Clone de Tagesspiegel.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-13", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Tagesspiegel", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "welt.ltd", + matchType: "exact", + reason: "Clone de Welt.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-28", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Die_Welt", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "welt.ws", + matchType: "exact", + reason: "Clone de Welt.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Die_Welt", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "welt.media", + matchType: "exact", + reason: "Clone de Welt.de", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-15", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Die_Welt", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "faz.ltd", + matchType: "exact", + reason: "Clone de FAZ.net (Frankfurter Allgemeine Zeitung)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-30", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "FAZ", "Usurpation-Identité", "Média-Légitime-Imité", "Geoblocking"] + }, + { + domain: "faz.agency", + matchType: "exact", + reason: "Clone de FAZ.net, utilise géolocalisation pour redirections", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-13", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "FAZ", "Usurpation-Identité", "Média-Légitime-Imité", "Geoblocking"] + }, + { + domain: "faz.life", + matchType: "exact", + reason: "Clone de FAZ.net", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-15", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "FAZ", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "nd-aktuell.net", + matchType: "exact", + reason: "Clone de Neues Deutschland (nd-aktuell.de)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-08-23", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Neues_Deutschland", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "nd-aktuell.pro", + matchType: "exact", + reason: "Clone de Neues Deutschland", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Neues_Deutschland", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "nd-aktuell.co", + matchType: "exact", + reason: "Clone de Neues Deutschland", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-13", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Neues_Deutschland", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "fraiesvolk.com", + matchType: "exact", + reason: "Site de propagande allemand", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-17", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "Désinformation-Ciblée"] + }, + + // ======================================================================== + // DOMAINES FRANÇAIS (6 variantes) + // ======================================================================== + { + domain: "20minuts.com", + matchType: "exact", + reason: "Usurpation du journal français 20 Minutes (typosquatting 20minutes → 20minuts)", + source: "Qurium Media Foundation, EU DisinfoLab", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-28", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "20_Minutes", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "leparisien.press", + matchType: "exact", + reason: "Clone de LeParisien.fr, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Le_Parisien", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "lefigaro.cam", + matchType: "exact", + reason: "Clone de LeFigaro.fr, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Le_Figaro", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "lefigaro.pics", + matchType: "exact", + reason: "Clone de LeFigaro.fr, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Le_Figaro", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "liberation.red", + matchType: "exact", + reason: "Clone de Liberation.fr, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Libération", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "lemonde.cam", + matchType: "exact", + reason: "Clone de LeMonde.fr, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Le_Monde", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES UK (3 variantes) + // ======================================================================== + { + domain: "dailymail.cfd", + matchType: "exact", + reason: "Clone de DailyMail.co.uk", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "UK", "Daily_Mail", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "theguardian.co.com", + matchType: "exact", + reason: "Clone de TheGuardian.com", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-07", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "UK", "The_Guardian", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "guardian.hair", + matchType: "exact", + reason: "Clone de TheGuardian.com, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "UK", "The_Guardian", "Usurpation-Identité", "DOJ-Seizure", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES USA (6+ variantes) + // ======================================================================== + { + domain: "reuters.cfd", + matchType: "exact", + reason: "Clone de Reuters.com", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-12", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Reuters", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "washingtonpost.pm", + matchType: "exact", + reason: "Clone de WashingtonPost.com, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Washington_Post", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "foxnews.click", + matchType: "exact", + reason: "Clone de FoxNews.com, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Fox_News", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "foxnews.homes", + matchType: "exact", + reason: "Clone de FoxNews.com, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Fox_News", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "forward.salon", + matchType: "exact", + reason: "Clone de Forward.com (média juif américain), saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Forward", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + { + domain: "forward.pics", + matchType: "exact", + reason: "Clone de Forward.com, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "Forward", "Usurpation-Identité", "DOJ-Seizure", "Élections", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES UKRAINE (3 variantes) + // ======================================================================== + { + domain: "rbk.kiev.ua", + matchType: "exact", + reason: "Clone de média ukrainien RBK", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-28", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "Anti-Ukraine", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "rbk.today", + matchType: "exact", + reason: "Clone de média ukrainien RBK", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-12", + riskLevel: "medium", + tags: ["Doppelganger", "Russie", "Ukraine", "Anti-Ukraine", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "obozrevatels.com", + matchType: "exact", + reason: "Clone de média ukrainien Obozrevatel", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-09-09", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "Anti-Ukraine", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES ITALIE + // ======================================================================== + { + domain: "ansa.ltd", + matchType: "exact", + reason: "Clone de l'agence de presse italienne ANSA", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-06-28", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Italie", "ANSA", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES PAYS BALTES (Estonie, Lettonie, Lituanie) + // ======================================================================== + { + domain: "delfl.cc", + matchType: "exact", + reason: "Clone de Delfi (média balte), ciblant Estonie/Lettonie/Lituanie", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-14", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Estonie", "Lettonie", "Lituanie", "Delfi", "Usurpation-Identité", "Typosquatting", "Média-Légitime-Imité"] + }, + { + domain: "lsm.li", + matchType: "exact", + reason: "Clone de LSM.lv (média letton)", + source: "Qurium Media Foundation", + reportUrl: "https://www.qurium.org/alerts/under-the-hood-of-a-doppelganger/", + identifiedDate: "2022-07-06", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Lettonie", "LSM", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + + // ======================================================================== + // DOMAINES - ORGANISATIONS INTERNATIONALES & GOUVERNEMENTS + // ======================================================================== + { + domain: "nato.ws", + matchType: "exact", + reason: "Clone du site officiel de l'OTAN, fausses déclarations sur budgets militaires", + source: "US Cyber Command, EU DisinfoLab", + reportUrl: "https://www.disinfo.eu/doppelganger-operation/", + identifiedDate: "2023-08-01", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "OTAN", "International", "Usurpation-Identité", "Gouvernement"] + }, + { + domain: "diplomatie.cam", + matchType: "exact", + reason: "Clone du Ministère français des Affaires Étrangères, fausses annonces fiscales", + source: "EU DisinfoLab, Gouvernement français", + reportUrl: "https://www.disinfo.eu/doppelganger-operation/", + identifiedDate: "2023-06-01", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "Usurpation-Identité", "Gouvernement"] + }, + + // ======================================================================== + // SITES DE PROPAGANDE ORIGINAUX (non-clones) + // Saisis par le DOJ en septembre 2024 + // ======================================================================== + { + domain: "reliable-recent-news.com", + matchType: "exact", + reason: "Site de propagande original, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "DOJ-Seizure", "Désinformation-Ciblée", "Élections"] + }, + { + domain: "moscowchronicles.com", + matchType: "exact", + reason: "Site de propagande original, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "DOJ-Seizure", "Désinformation-Ciblée"] + }, + { + domain: "rrn.media", + matchType: "exact", + reason: "Site de propagande (anciennement russianews.com), saisi par le DOJ", + source: "US Department of Justice, US Cyber Command", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "DOJ-Seizure", "Désinformation-Ciblée"] + }, + { + domain: "tribunalukraine.info", + matchType: "exact", + reason: "Site anti-ukrainien, cartoons contre Zelensky, saisi par le DOJ", + source: "US Department of Justice, EU DisinfoLab", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "DOJ-Seizure", "Anti-Ukraine", "Désinformation-Ciblée"] + }, + { + domain: "crimea-news.click", + matchType: "exact", + reason: "Site de propagande sur la Crimée, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine", "Crimée"] + }, + { + domain: "kyiv-post.info", + matchType: "exact", + reason: "Clone de Kyiv Post, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine", "Usurpation-Identité", "Média-Légitime-Imité"] + }, + { + domain: "ukrainian-news.press", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + + // ======================================================================== + // DOMAINES SUPPLÉMENTAIRES (DOJ Seizure - Sept 2024) + // ======================================================================== + { + domain: "thegrio.xyz", + matchType: "exact", + reason: "Clone de TheGrio (média afro-américain), ciblant communauté noire américaine, saisi par DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "USA", "DOJ-Seizure", "Élections", "Usurpation-Identité", "Désinformation-Ciblée", "Média-Légitime-Imité"] + }, + { + domain: "europe-today.cam", + matchType: "exact", + reason: "Site de propagande ciblant l'Europe, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Europe", "DOJ-Seizure", "Multi-Cibles"] + }, + { + domain: "israel-today.cam", + matchType: "exact", + reason: "Site de propagande ciblant Israël, saisi par le DOJ", + source: "US Department of Justice, Haaretz", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Israël", "DOJ-Seizure", "Désinformation-Ciblée"] + }, + { + domain: "germany-today.cam", + matchType: "exact", + reason: "Site de propagande ciblant l'Allemagne, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Allemagne", "DOJ-Seizure"] + }, + { + domain: "france-yesterday.xyz", + matchType: "exact", + reason: "Site de propagande ciblant la France, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "France", "DOJ-Seizure"] + }, + { + domain: "daily-news-of-ukraine.info", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + { + domain: "ukraine-today.info", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + { + domain: "news-from-ukraine.com", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + { + domain: "today-ukraine.info", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + { + domain: "ukr-today.com", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + }, + { + domain: "today-about-ukraine.info", + matchType: "exact", + reason: "Site anti-ukrainien, saisi par le DOJ", + source: "US Department of Justice", + reportUrl: "https://www.justice.gov/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign", + identifiedDate: "2024-09-04", + riskLevel: "high", + tags: ["Doppelganger", "Russie", "Ukraine", "DOJ-Seizure", "Anti-Ukraine"] + } + +]; + +// ============================================================================= +// INFORMATIONS SUR LA CAMPAGNE +// ============================================================================= + +const doppelgangerCampaignInfo = { + nom: "Doppelganger", + operateurs: [ + "Social Design Agency (SDA)", + "Structura National Technology", + "ANO Dialog" + ], + direction: "Administration Présidentielle Russe (Sergei Kiriyenko)", + periodeActive: "Mai 2022 - Présent", + domainesIdentifies: doppelgangerDomains.length, + domainesEstimesTotal: "200+", + principalesCibles: ["Allemagne", "France", "USA", "UK", "Ukraine", "Italie", "États Baltes"], + objectifs: [ + "Réduire le soutien international à l'Ukraine", + "Promouvoir les narratifs pro-russes", + "Influencer les élections (USA 2024, France 2024)", + "Semer la division dans les sociétés occidentales" + ], + techniques: [ + "Typosquatting de médias légitimes", + "Utilisation de LLM pour générer du contenu", + "Géoblocage/géolocalisation", + "Service de cloaking (Kehr)", + "Logiciel de tracking (Keitaro)", + "Vidéos manipulées avec Adobe Suite", + "Réseaux de bots sur réseaux sociaux", + "Publicités payantes" + ], + infrastructure: [ + "Cloudflare CDN", + "AEZA Group (Russie) - cœur du réseau", + "Webzilla/XBT Holding", + "TimeWeb (Russie)", + "BlueVPS/Glesys (Estonie, Suède)", + "JavaPipe (Pays-Bas)", + "Hetzner (Finlande, Allemagne)", + "Aurologic (Allemagne)" + ], + registraires: ["GoDaddy", "Namecheap", "Nic.ru", "Pananames"], + actionsLegales: { + domainesSaisisUSA: 32, + dateSaisieUSA: "2024-09-04", + sanctionsUE: "Juillet 2023", + sanctionsUK: "Octobre 2024", + sanctionsUSA: "Mars 2024, Septembre 2024" + } +}; + +// ============================================================================= +// FONCTIONS UTILITAIRES +// ============================================================================= + +function filterDoppelgangerByTag(tag) { + return doppelgangerDomains.filter(d => d.tags.includes(tag)); +} + +function filterDoppelgangerByRiskLevel(level) { + return doppelgangerDomains.filter(d => d.riskLevel === level); +} + +function filterDoppelgangerByCountry(country) { + return doppelgangerDomains.filter(d => + d.tags.some(tag => tag.toLowerCase().includes(country.toLowerCase())) + ); +} + +function filterDoppelgangerByMedia(mediaName) { + return doppelgangerDomains.filter(d => + d.tags.some(tag => tag.toLowerCase().includes(mediaName.toLowerCase())) + ); +} + +function getDoppelgangerTags() { + const allTags = new Set(); + doppelgangerDomains.forEach(d => { + d.tags.forEach(tag => allTags.add(tag)); + }); + return Array.from(allTags).sort(); +} + +function getDoppelgangerStats() { + const stats = { + total: doppelgangerDomains.length, + highRisk: doppelgangerDomains.filter(d => d.riskLevel === "high").length, + mediumRisk: doppelgangerDomains.filter(d => d.riskLevel === "medium").length, + lowRisk: doppelgangerDomains.filter(d => d.riskLevel === "low").length, + tags: getDoppelgangerTags(), + byCountry: {}, + byMedia: {}, + bySource: {}, + dojSeized: doppelgangerDomains.filter(d => d.tags.includes("DOJ-Seizure")).length, + timeline: { + firstDomain: "2022-06-05 (blld.live)", + lastUpdate: "2024-09-04 (DOJ Seizure)", + peakActivity: "Juillet-Septembre 2022" + } + }; + + // Stats par pays + const countries = ["Allemagne", "France", "USA", "UK", "Ukraine", "Italie"]; + countries.forEach(country => { + stats.byCountry[country] = filterDoppelgangerByCountry(country).length; + }); + + // Stats par média + const medias = ["Bild", "Spiegel", "T-Online", "FAZ", "20_Minutes", "Fox_News", "Guardian"]; + medias.forEach(media => { + stats.byMedia[media] = filterDoppelgangerByMedia(media).length; + }); + + // Stats par source + doppelgangerDomains.forEach(d => { + const source = d.source.split(',')[0].trim(); + stats.bySource[source] = (stats.bySource[source] || 0) + 1; + }); + + return stats; +} + +function getDoppelgangerTimeline() { + const timeline = {}; + doppelgangerDomains.forEach(d => { + const date = d.identifiedDate; + if (!timeline[date]) { + timeline[date] = []; + } + timeline[date].push(d.domain); + }); + return Object.entries(timeline).sort((a, b) => a[0].localeCompare(b[0])); +} + +// ============================================================================= +// EXPORTS ET DISPONIBILITÉ GLOBALE +// ============================================================================= + +if (typeof module !== 'undefined' && module.exports) { + module.exports = { + doppelgangerDomains, + doppelgangerCampaignInfo, + filterDoppelgangerByTag, + filterDoppelgangerByRiskLevel, + filterDoppelgangerByCountry, + filterDoppelgangerByMedia, + getDoppelgangerTags, + getDoppelgangerStats, + getDoppelgangerTimeline + }; +} + +if (typeof window !== 'undefined') { + window.doppelgangerDomains = doppelgangerDomains; + window.doppelgangerCampaignInfo = doppelgangerCampaignInfo; + window.doppelgangerUtils = { + filterByTag: filterDoppelgangerByTag, + filterByRiskLevel: filterDoppelgangerByRiskLevel, + filterByCountry: filterDoppelgangerByCountry, + filterByMedia: filterDoppelgangerByMedia, + getTags: getDoppelgangerTags, + getStats: getDoppelgangerStats, + getTimeline: getDoppelgangerTimeline + }; +} + +// Log de chargement +console.log(`✓ Liste Doppelganger COMPLÈTE chargée: ${doppelgangerDomains.length} domaines identifiés`); +console.log("📊 Statistiques Doppelganger:", getDoppelgangerStats()); +console.log("ℹ️ Informations sur la campagne:", doppelgangerCampaignInfo); \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Pravda.js b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Pravda.js new file mode 100644 index 0000000..9a8b364 --- /dev/null +++ b/plugin/plugin_chrome/releases/Plugin-dima/data/databases/Pravda.js @@ -0,0 +1,710 @@ +// DIMA - Base de données d'opération Pravda (Portal Kombat) +// Réseau de désinformation russe documenté par VIGINUM, DFRLab et CheckFirst + +/** + * PRAVDA NETWORK (PORTAL KOMBAT) + * =============================== + * + * Réseau de désinformation pro-Kremlin actif depuis 2014 + * Opération exposée en février 2024 par l'agence française VIGINUM + * Plus de 3,7 millions d'articles publiés sur des centaines de sites + * Cible plus de 83 pays et régions à travers le monde + * + * Sources principales: + * - VIGINUM (France) + * - DFRLab (Atlantic Council) + * - CheckFirst (Finlande) + * - American Sunlight Project + * + * Liens opérateur: + * - TigerWeb (entreprise IT basée en Crimée) + * - Yevgeny Shevchenko (fondateur) + */ + +const pravdaDomains = [ + // ===== DOMAINES PRINCIPAUX - EUROPE DE L'OUEST ===== + { + domain: "pravda-en.com", + matchType: "exact", + reason: "Site principal du réseau Pravda ciblant les audiences anglophones avec du contenu pro-Kremlin traduit automatiquement", + source: "VIGINUM, DFRLab", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: ["Pravda", "Russie", "UK", "USA", "Anti-Ukraine", "LLM", "Multi-Langues"] + }, + { + domain: "pravda-fr.com", + matchType: "exact", + reason: "Site du réseau Pravda ciblant la France, diffusant des narratifs pro-russes et anti-ukrainiens", + source: "VIGINUM, DFRLab", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: ["Pravda", "Russie", "France", "Anti-Ukraine", "Élections", "Multi-Langues"] + }, + { + domain: "pravda-de.com", + matchType: "exact", + reason: "Version allemande du réseau Pravda, amplifiant la désinformation russe en Allemagne", + source: "VIGINUM, DFRLab", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: ["Pravda", "Russie", "Allemagne", "Anti-Ukraine", "Anti-NATO", "Multi-Langues"] + }, + { + domain: "pravda-pl.com", + matchType: "exact", + reason: "Site ciblant la Pologne avec du contenu pro-Kremlin, particulièrement actif avant les élections européennes 2024", + source: "VIGINUM, DFRLab", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: ["Pravda", "Russie", "Pologne", "Anti-Ukraine", "Élections", "Multi-Langues"] + }, + { + domain: "pravda-es.com", + matchType: "exact", + reason: "Version espagnole diffusant des narratifs pro-russes vers l'Espagne et l'Amérique latine", + source: "VIGINUM, DFRLab", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2023-06-24", + riskLevel: "high", + tags: ["Pravda", "Russie", "Espagne", "Anti-Ukraine", "Multi-Langues"] + }, + + // ===== DOMAINES NEWS-PRAVDA.COM (NOUVELLE INFRASTRUCTURE 2024) ===== + { + domain: "news-pravda.com", + matchType: "contains", + reason: "Domaine principal de la nouvelle infrastructure centralisée lancée en 2024, hébergeant plus de 140 sous-domaines ciblant 83+ pays", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Infrastructure", "Multi-Langues", "LLM"] + }, + { + domain: "france.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la France, partie de la nouvelle infrastructure centralisée", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "France", "Anti-Ukraine", "Élections"] + }, + { + domain: "germany.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Allemagne avec 376,700+ articles publiés", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Allemagne", "Anti-Ukraine", "Élections"] + }, + { + domain: "ukraine.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine diffusant des narratifs anti-ukrainiens directement vers l'Ukraine, 270,300+ articles", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Ukraine", "Anti-Ukraine", "Désinformation-Ciblée"] + }, + { + domain: "moldova.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Moldavie avec 244,700+ articles, particulièrement actif durant les périodes électorales", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-04-26", + riskLevel: "high", + tags: ["Pravda", "Russie", "Moldavie", "Élections", "Anti-Ukraine"] + }, + { + domain: "serbia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Serbie avec 228,900+ articles pro-russes", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Serbie", "Anti-Ukraine", "Balkans"] + }, + + // ===== ÉTATS BALTES ===== + { + domain: "estonia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Estonie et sa minorité russophone", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-04-26", + riskLevel: "high", + tags: ["Pravda", "Russie", "Estonie", "Baltes", "Anti-NATO"] + }, + { + domain: "latvia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Lettonie et sa minorité russophone", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-04-26", + riskLevel: "high", + tags: ["Pravda", "Russie", "Lettonie", "Baltes", "Anti-NATO"] + }, + { + domain: "lithuania.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Lituanie et sa minorité russophone", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-04-26", + riskLevel: "high", + tags: ["Pravda", "Russie", "Lituanie", "Baltes", "Anti-NATO"] + }, + + // ===== SCANDINAVIE ===== + { + domain: "finland.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Finlande avec propagande anti-OTAN", + source: "DFRLab, CheckFirst, NORDIS", + reportUrl: "https://www.nordishub.eu/nordis-investigation/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Finlande", "Anti-NATO", "Scandinavie"] + }, + { + domain: "norway.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Norvège, documenté par l'enquête NORDIS", + source: "DFRLab, CheckFirst, NORDIS", + reportUrl: "https://www.nordishub.eu/nordis-investigation/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Norvège", "Anti-NATO", "Scandinavie"] + }, + { + domain: "sweden.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Suède avec narratifs anti-OTAN", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Suède", "Anti-NATO", "Scandinavie"] + }, + { + domain: "denmark.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant le Danemark", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Danemark", "Scandinavie"] + }, + + // ===== EUROPE CENTRALE ET DE L'EST ===== + { + domain: "czechia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la République tchèque", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Tchéquie", "Anti-Ukraine"] + }, + { + domain: "hungary.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Hongrie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Hongrie", "Anti-Ukraine"] + }, + { + domain: "bulgaria.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Bulgarie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Bulgarie", "Balkans"] + }, + { + domain: "romania.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Roumanie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Roumanie", "Anti-Ukraine"] + }, + { + domain: "slovenia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Slovénie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Slovénie", "Balkans"] + }, + { + domain: "croatia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Croatie", + source: "EDMO", + reportUrl: "https://edmo.eu/publications/russian-disinformation-network-pravda-tries-a-new-route-to-influence-eu-public-opinions-few-days-ahead-of-the-vote/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Croatie", "Balkans"] + }, + + // ===== EUROPE DU SUD ===== + { + domain: "italy.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Italie", + source: "DFRLab, CheckFirst, EDMO", + reportUrl: "https://edmo.eu/publications/russian-disinformation-network-pravda-tries-a-new-route-to-influence-eu-public-opinions-few-days-ahead-of-the-vote/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Italie", "Anti-Ukraine"] + }, + { + domain: "greece.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Grèce, documenté par Greece Fact Check", + source: "DFRLab, CheckFirst, EDMO", + reportUrl: "https://edmo.eu/publications/russian-disinformation-network-pravda-tries-a-new-route-to-influence-eu-public-opinions-few-days-ahead-of-the-vote/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Grèce", "Anti-Ukraine"] + }, + { + domain: "portugal.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant le Portugal", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Portugal", "Anti-Ukraine"] + }, + + // ===== AUTRES PAYS EUROPÉENS ===== + { + domain: "austria.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Autriche", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Autriche", "Anti-Ukraine"] + }, + { + domain: "netherlands.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant les Pays-Bas", + source: "DFRLab, CheckFirst, EDMO", + reportUrl: "https://edmo.eu/publications/russian-disinformation-network-pravda-tries-a-new-route-to-influence-eu-public-opinions-few-days-ahead-of-the-vote/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Pays-Bas", "Anti-Ukraine"] + }, + { + domain: "belgium.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Belgique", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Belgique", "Anti-Ukraine"] + }, + + // ===== CAUCASE ET PARTENARIAT ORIENTAL ===== + { + domain: "georgia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Géorgie, particulièrement actif durant les élections parlementaires d'octobre 2024", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2024-10-01", + riskLevel: "high", + tags: ["Pravda", "Russie", "Géorgie", "Élections", "Caucase"] + }, + { + domain: "armenia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Arménie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Arménie", "Caucase"] + }, + { + domain: "abkhazia.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Abkhazie (territoire contesté)", + source: "CheckFirst GitHub", + reportUrl: "https://github.com/CheckFirstHQ/pravda-network", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Abkhazie", "Territoires-Contestés"] + }, + + // ===== ASIE ===== + { + domain: "japan.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant le Japon", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Japon", "Asie"] + }, + { + domain: "taiwan.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant Taïwan", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Taïwan", "Asie"] + }, + { + domain: "turkey.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant la Turquie", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Turquie"] + }, + + // ===== AFRIQUE ===== + { + domain: "algeria.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Algérie, partie de l'expansion africaine du réseau", + source: "CheckFirst GitHub", + reportUrl: "https://github.com/CheckFirstHQ/pravda-network", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Algérie", "Afrique", "Sahel"] + }, + { + domain: "albania.news-pravda.com", + matchType: "exact", + reason: "Sous-domaine ciblant l'Albanie", + source: "CheckFirst GitHub", + reportUrl: "https://github.com/CheckFirstHQ/pravda-network", + identifiedDate: "2024-05-23", + riskLevel: "high", + tags: ["Pravda", "Russie", "Albanie", "Balkans"] + }, + + // ===== DOMAINES HISTORIQUES (CRIMEA-NEWS, PREMIÈRE VERSION) ===== + { + domain: "crimea-news.com", + matchType: "exact", + reason: "Premier site du réseau Pravda (version 0), créé par Yevgeny Shevchenko en 2011, précurseur de l'opération Portal Kombat", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2011-01-01", + riskLevel: "high", + tags: ["Pravda", "Russie", "Crimée", "Infrastructure", "TigerWeb"] + }, + { + domain: "lenta.crimea.ua", + matchType: "exact", + reason: "Agrégateur de nouvelles original créé par Yevgeny Shevchenko, précurseur du réseau Pravda", + source: "DFRLab", + reportUrl: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/", + identifiedDate: "2011-01-01", + riskLevel: "high", + tags: ["Pravda", "Russie", "Crimée", "Infrastructure", "TigerWeb"] + }, + + // ===== DOMAINES CIBLANT L'UKRAINE (ÉCOSYSTÈME 2) ===== + { + domain: "topnews", + matchType: "contains", + reason: "Domaines de deuxième génération ciblant les russophones en Ukraine, actifs entre avril et décembre 2022", + source: "VIGINUM, DFRLab", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: ["Pravda", "Russie", "Ukraine", "Anti-Ukraine", "Désinformation-Ciblée"] + }, + { + domain: "uanews", + matchType: "contains", + reason: "Domaines ciblant les russophones en Ukraine, partie du deuxième écosystème (41 sites)", + source: "VIGINUM, DFRLab", + reportUrl: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: ["Pravda", "Russie", "Ukraine", "Anti-Ukraine", "Désinformation-Ciblée"] + }, + { + domain: "dnr-news.com", + matchType: "exact", + reason: "Site ciblant le Donbass, amplifiant les narratifs séparatistes pro-russes", + source: "DFRLab, CheckFirst", + reportUrl: "https://dfrlab.org/2025/03/12/pravda-network-wikipedia-llm-x/", + identifiedDate: "2022-04-03", + riskLevel: "high", + tags: ["Pravda", "Russie", "Ukraine", "Donbass", "Territoires-Contestés"] + }, + + // ===== SOURCES AMPLIFIÉES PAR LE RÉSEAU ===== + { + domain: "news-front.su", + matchType: "exact", + reason: "Site pro-russe multilingue établi en août 2023, utilisé comme source par le réseau Pravda", + source: "EDMO", + reportUrl: "https://edmo.eu/publications/russian-disinformation-network-pravda-tries-a-new-route-to-influence-eu-public-opinions-few-days-ahead-of-the-vote/", + identifiedDate: "2023-08-01", + riskLevel: "high", + tags: ["Pravda", "Russie", "Infrastructure", "Multi-Langues"] + } +]; + +// ============================================================================= +// MÉTADONNÉES DU RÉSEAU +// ============================================================================= + +const pravdaNetworkMetadata = { + operationName: "Pravda Network (Portal Kombat)", + aliases: ["Portal Kombat", "Pravda Ecosystem"], + active: true, + firstDetected: "2024-02-12", + operatorEntity: "TigerWeb (Crimée)", + operatorIndividual: "Yevgeny Shevchenko", + primaryTargets: ["Europe", "Ukraine", "Afrique", "Asie"], + articlesPublished: "3,700,000+", + domainsCount: "224+ (avril 2024), 140 sous-domaines actifs (2025)", + countriesTargeted: "83+", + + primarySources: [ + "TASS (136,000 citations)", + "RIA Novosti (99,000 citations)", + "Lenta (89,000 citations)", + "Komsomolskaya Pravda (59,000 citations)", + "RT (54,000 citations)", + "Telegram channels pro-russes", + "InfoDefense/SurfNoise network" + ], + + techniques: [ + "Traduction automatique de masse", + "Publication automatisée à haute fréquence (jusqu'à 650 articles/heure)", + "Optimisation SEO pour moteurs de recherche", + "LLM grooming (pollution des données d'entraînement IA)", + "Pollution de Wikipedia", + "Réutilisation cross-platform du contenu" + ], + + exposedBy: [ + "VIGINUM (France)", + "DFRLab (Atlantic Council)", + "CheckFirst (Finlande)", + "American Sunlight Project", + "EDMO (European Digital Media Observatory)", + "NewsGuard Technologies" + ], + + majorReports: [ + { + date: "2024-02-12", + organization: "VIGINUM", + title: "Portal Kombat Network Report", + url: "https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf" + }, + { + date: "2025-02-24", + organization: "DFRLab & CheckFirst", + title: "Russia's so-called 'Pravda' network expands worldwide", + url: "https://dfrlab.org/2025/02/24/russia-pravda-network-expands-worldwide/" + }, + { + date: "2025-03-12", + organization: "DFRLab & CheckFirst", + title: "Russia-linked Pravda network cited on Wikipedia, LLMs, and X", + url: "https://dfrlab.org/2025/03/12/pravda-network-wikipedia-llm-x/" + }, + { + date: "2025-04-18", + organization: "DFRLab & CheckFirst", + title: "Russia's Pravda network in numbers: Introducing the Pravda Dashboard", + url: "https://dfrlab.org/2025/04/18/introducing-the-pravda-dashboard/" + } + ], + + dashboardUrl: "https://dfrlab.org/the-pravda-network/", + githubDataset: "https://github.com/CheckFirstHQ/pravda-network" +}; + +// ============================================================================= +// FONCTIONS UTILITAIRES +// ============================================================================= + +// Filtrer par tag +function filterPravdaByTag(tag) { + return pravdaDomains.filter(d => d.tags.includes(tag)); +} + +// Filtrer par niveau de risque +function filterPravdaByRiskLevel(level) { + return pravdaDomains.filter(d => d.riskLevel === level); +} + +// Filtrer par pays cible +function filterPravdaByCountry(country) { + return pravdaDomains.filter(d => d.tags.includes(country)); +} + +// Obtenir tous les tags uniques +function getPravdaTags() { + const allTags = new Set(); + pravdaDomains.forEach(d => { + d.tags.forEach(tag => allTags.add(tag)); + }); + return Array.from(allTags).sort(); +} + +// Obtenir les statistiques +function getPravdaStats() { + return { + total: pravdaDomains.length, + highRisk: pravdaDomains.filter(d => d.riskLevel === "high").length, + mediumRisk: pravdaDomains.filter(d => d.riskLevel === "medium").length, + lowRisk: pravdaDomains.filter(d => d.riskLevel === "low").length, + tags: getPravdaTags(), + metadata: pravdaNetworkMetadata + }; +} + +// Obtenir les domaines par région +function getPravdaByRegion() { + return { + europe_ouest: filterPravdaByTag("France").concat( + filterPravdaByTag("Allemagne"), + filterPravdaByTag("UK"), + filterPravdaByTag("Belgique"), + filterPravdaByTag("Pays-Bas") + ), + europe_est: filterPravdaByTag("Pologne").concat( + filterPravdaByTag("Tchéquie"), + filterPravdaByTag("Hongrie"), + filterPravdaByTag("Roumanie") + ), + baltes: filterPravdaByTag("Baltes"), + balkans: filterPravdaByTag("Balkans"), + scandinavie: filterPravdaByTag("Scandinavie"), + ukraine: filterPravdaByTag("Ukraine"), + caucase: filterPravdaByTag("Caucase"), + afrique: filterPravdaByTag("Afrique"), + asie: filterPravdaByTag("Asie") + }; +} + +// ============================================================================= +// EXPORTS ET DISPONIBILITÉ GLOBALE +// ============================================================================= + +// Export pour Node.js / modules +if (typeof module !== 'undefined' && module.exports) { + module.exports = { + pravdaDomains, + pravdaNetworkMetadata, + filterPravdaByTag, + filterPravdaByRiskLevel, + filterPravdaByCountry, + getPravdaTags, + getPravdaStats, + getPravdaByRegion + }; +} + +// Disponibilité globale pour le navigateur +if (typeof window !== 'undefined') { + window.pravdaDomains = pravdaDomains; + window.pravdaNetworkMetadata = pravdaNetworkMetadata; + window.pravdaUtils = { + filterByTag: filterPravdaByTag, + filterByRiskLevel: filterPravdaByRiskLevel, + filterByCountry: filterPravdaByCountry, + getTags: getPravdaTags, + getStats: getPravdaStats, + getByRegion: getPravdaByRegion + }; +} + +// Log de chargement +console.log(`Liste Pravda Network chargée: ${pravdaDomains.length} domaines identifiés`); +console.log("Note: Le réseau compte 140+ sous-domaines actifs sur news-pravda.com"); +console.log("Pour la liste complète et mise à jour: https://github.com/CheckFirstHQ/pravda-network"); +if (pravdaDomains.length > 0) { + console.log("Statistiques Pravda Network:", getPravdaStats()); +} + +// ============================================================================= +// NOTES IMPORTANTES +// ============================================================================= + +/** + * CARACTÉRISTIQUES DU RÉSEAU PRAVDA: + * + * 1. ÉVOLUTION EN TROIS PHASES: + * - Phase 1 (2011-2022): Crimea News et domaines locaux russes/ukrainiens + * - Phase 2 (2022): 41 sites ciblant les russophones en Ukraine (-news.ru) + * - Phase 3 (2023-2025): Expansion mondiale avec domaines pravda-XX.com puis XX.news-pravda.com + * + * 2. INFRASTRUCTURE TECHNIQUE: + * - Opéré par TigerWeb (Crimée, Russie) + * - Serveurs hébergés en Russie + * - Traduction automatique multilingue + * - Publication automatisée massive + * + * 3. IMPACT: + * - 3,7+ millions d'articles publiés + * - Présent sur Wikipedia (1,907 liens dans 44 langues) + * - 33% de taux de reproduction dans les LLMs (ChatGPT, Gemini, etc.) + * - Contenu cité sur X/Twitter via Community Notes + * + * 4. MODUS OPERANDI: + * - Aucun contenu original + * - Réplication de médias d'État russes sanctionnés (RT, Sputnik, RIA) + * - Amplification de chaînes Telegram pro-Kremlin + * - Optimisation SEO pour algorithmes de recherche + * - "LLM grooming" pour polluer les données d'entraînement IA + * + * 5. DONNÉES ACTUALISÉES: + * - Dataset mis à jour toutes les heures sur GitHub CheckFirst + * - Dashboard interactif disponible via DFRLab + * - Liste complète: https://github.com/CheckFirstHQ/pravda-network + * + * AVERTISSEMENT: Cette liste représente un échantillon des domaines principaux. + * Le réseau compte 140+ sous-domaines actifs. Pour une liste exhaustive et + * mise à jour en temps réel, consultez le dépôt GitHub de CheckFirst. + */ \ No newline at end of file diff --git a/plugin/plugin_chrome/releases/Plugin-dima/manifest.json b/plugin/plugin_chrome/releases/Plugin-dima/manifest.json index 7ef1aad..38b148e 100644 --- a/plugin/plugin_chrome/releases/Plugin-dima/manifest.json +++ b/plugin/plugin_chrome/releases/Plugin-dima/manifest.json @@ -21,10 +21,12 @@ "data/databases/RRN.js", "data/databases/Baybridge.js", "data/databases/Storm1516.js", + "data/databases/Pravda.js", "data/techniques.js", + "data/databases/Doppelganger.js", "data/keywords.js", "modules/contentExtractor.js", - "modules/suspiciousSitesManager.js", + "modules/Suspicioussitesmanager.js", "modules/techniqueAnalyzer.js", "modules/uiManager.js", "content.js" diff --git a/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js b/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js index 5acd36a..98e772f 100644 --- a/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js +++ b/plugin/plugin_chrome/releases/Plugin-dima/modules/Suspicioussitesmanager.js @@ -1,5 +1,5 @@ // DIMA - Gestionnaire Central de Sites Suspects -// Version 2.2 - Support COMPLET des comptes sociaux (format Storm1516 natif) +// Version 2.3 - Support COMPLET des comptes sociaux (format Storm1516 natif) // Ce fichier charge et agrège toutes les bases de données de domaines suspects /** @@ -120,6 +120,29 @@ class SuspiciousSitesManager { console.log(` ✓ Source Storm 1516 (comptes sociaux) chargée: ${storm1516SocialAccounts.length} comptes`); } + // Source 7: Pravda + if (typeof pravdaDomains !== 'undefined' && Array.isArray(pravdaDomains)) { + this.registerSource('Pravda_Domains', pravdaDomains, { + name: 'Réseau Pravda (Domaines)', + description: 'Réseau de désinformation pro-Kremlin actif depuis 2014, Opération exposée en février 2024 par VIGINUM', + organization: 'VIGINUM, DFRLab (Atlantic Council), CheckFirst (Finlande),American Sunlight Project', + reportUrl: 'https://www.sgdsn.gouv.fr/files/files/20240212_NP_SGDSN_VIGINUM_PORTAL-KOMBAT-NETWORK_ENG_VF.pdf', + reportDate: '2024-12-02' + }); + console.log(` ✓ Source Pravda chargée: ${pravdaDomains.length} domaines`); + } + + // Source 8: Doppelganger - noms de domaines + if (typeof doppelgangerDomains !== 'undefined' && Array.isArray(doppelgangerDomains)) { + this.registerSource('Doppelganger_Domains', doppelgangerDomains, { + name: 'Opération - réseau Doppelganger', + description: 'Réseau de désinformation pro-Kremlin créant des sites Web usurpant l\'identité de sources d\'information légitimes. Opérée par Social Design Agency (SDA)', + organization: 'Sources multiples: Wikipedia, Qurium, US DOJ, EU DisinfoLab, DFRLab', + reportUrl: 'https://en.wikipedia.org/wiki/List_of_political_disinformation_website_campaigns_in_Russia', + reportDate: '2023-11-23' + }); + console.log(` ✓ Source Doppelganger chargée: ${doppelgangerDomains.length} domaines`); + } // Avertissement si aucune source n'est chargée if (this.sources.size === 0) {