Influence Ops Records

What influence operations are

Fake news websites in influence operations

Last checked 24 October 2026 · 8 sources

Short answer

Reports describe two main types of fake news site. Some spoof real outlets, such as the Doppelganger domains that copy news or government sites 3. Others are invented brands posing as local media, such as Iran-linked sites Microsoft named in August 2024 4. Google blocks such domains from Google News and Discover, and listed 177 Portal Kombat domains in February 2025 6. The EEAS classes networks such as Portal Kombat and Paperwall as state-aligned channels 7.
Doppelganger domains listed by Meta
42 domains listed as spoofing news sites, December 2024 update 3
Portal Kombat domains, Google
57 in January and 177 in February 2025 6
Storm-2035 sites named by Microsoft
EvenPolitics, Nio Thinker, Savannah Time 4
Media impersonation, EEAS 2025
Outlets including Der Spiegel, Le Point and Die Welt 8

Spoofed outlets

Spoofing means copying the name and design of a real outlet. Meta's December 2024 update on the Russia-based Doppelganger operation listed 42 domains in a table headed domains spoofing news sites 3. Meta said it was the first to publicly attribute Doppelganger, in December 2022, to two companies in Russia, Structura National Technology and Social Design Agency 3.

The 4th EEAS report lists impersonation of outlets such as Der Spiegel, Le Point and Die Welt under Doppelganger 8. Meta said an Iran-origin brand in its Q3 2024 report ran a website mimicking the Jerusalem Post 3.

Invented local brands

Many networks invent outlets that do not exist. Microsoft's Threat Analysis Center said on 9 August 2024 that an Iranian network it calls Storm-2035 ran covert news sites aimed at US voters. It named EvenPolitics, Nio Thinker and Savannah Time 4. Microsoft said the sites appeared to plagiarise US publications using AI-enabled services 4.

Meta's Q2 2024 report linked a network using sites such as yerli-media and sakartvelo-today to IMA Digital, a Moscow-registered marketing firm 2. Another Russia-origin network posted under brands including Euro Top News 2. OpenAI listed newstop.africa among Stop News sites in October 2024 5.

Meta said a Moldova-origin network ran about a dozen fictitious Russian-language news brands 3. A Lebanon-origin network ran three fictitious news entities, Dofek, Israel in a Minute and Halalom Israel 3. In Bangladesh, Meta said Pages posed as fictitious outlets and used the names of existing news organisations 1.

Aggregator and filler networks

The 3rd EEAS report, published in March 2025, places Portal Kombat, False Façade and Paperwall in its state-aligned category 7. That category covers channels showing systematic alignment with a state without enough evidence for formal attribution 7.

Google lists domains it blocks from appearing on Google News and Discover. Its Q1 2025 bulletin listed 57 Portal Kombat domains in January and 177 in February, and 47 Doppelganger domains in February 6. The 4th EEAS report says Paperwall expanded its filler websites, mostly aimed at Africa and the Middle East 8.

How the sites spread

Reports describe sites being pushed through social media accounts. Meta said in May 2024 that Doppelganger operators had largely stopped linking to spoofed news domains on its apps and had stopped attempting to share links by April 2024 1. Microsoft said in August 2024 it had not yet seen significant social media amplification of the Storm-2035 sites 4.

  • Meta: STOIC ran branded websites including Nonagenda, Ufnews and uc4canada, May 2024 1
  • OpenAI: Stop News used euronewstop.co.uk, newstop.africa, britishtalks.com and britishattitudes.com, October 2024 5
  • EEAS: about five inauthentic media-brand websites run by RRN Media Brands, 2025 8

Common questions

What is Doppelganger?

Meta describes it as a Russia-based operation. It said it was the first to publicly attribute it, in December 2022, to two companies in Russia, Structura National Technology and Social Design Agency 3.

Does Google remove fake news sites?

Google's bulletins list domains it blocks from eligibility to appear on Google News and Discover 6.

What is Portal Kombat?

The EEAS lists it as a state-aligned network in its March 2025 report 7. Google listed Portal Kombat domains in 2025 6.

Are these sites always run by governments?

No. Meta linked some to firms such as IMA Digital 2. The EEAS state-aligned category covers sites without formal attribution 7.

Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@influenceopsrecords.com.

Sources

  1. Meta: Q1 2024 Adversarial Threat Report (May 2024)
  2. Meta: Q2 2024 Adversarial Threat Report (August 2024)
  3. Meta: Q3 2024 Adversarial Threat Report (December 2024)
  4. Microsoft Threat Analysis Center: Iran steps into US election 2024 with cyber-enabled influence operations (9 August 2024)
  5. OpenAI: Influence and cyber operations: an update (October 2024)
  6. Google: TAG Bulletin: Q1 2025 (15 May 2025)
  7. EEAS: 3rd EEAS Report on Foreign Information Manipulation and Interference Threats, Exposing the architecture of FIMI operations (March 2025)
  8. EEAS: 4th EEAS Report on Foreign Information Manipulation and Interference Threats, Dismantling the FIMI House of Cards (March 2026)

Related