Amateur Hour – EU DisInfo Lab finds fake Indian news sites

Reading Time: 3 minutes

Many news outlets are reporting an interview with a Brussels NGO called EU DisInfo Lab, (click the link to read the story) which found 265 websites in “65 countries” that posted the same content in an apparent attempt to influence Members of the European Parliament. The material was pro-India.

Three of the sites covering the same article.

I am not too interested in the underlying political story, but my assessment of the tactics of the alleged publisher can be summed up as “amateur hour”. Why? Let me count the ways.

The domains could well be purporting to be in 65 countries, but they were mostly hosted in the United States at three main hosts, probably VPS accounts, or less likely, dedicated servers. This made it easy for EU DisInfo Lab (and me) to find most of the 265 websites. I searched for one of the articles as pictured above and found that Google had indexed about twenty of them. So that’s another rookie error.

So if you (the website manager) are stupid enough to think that 265 copies of an article (allegedly copied from some Russian propaganda site) will be found in Google or another search engine, then you deserve to be fired by the ultimate client. No, if you are lucky enough to get Google to crawl all the sites, a search result will not list all 265 domains. In fact, you’d be lucky if even one of those sites shows up on the first page of results.

About 248 out of the 265 sites were at three hosts, with many on the same IP address, e.g. 162.241.171.75, which was one of them. There are free tools such as View DNS to get a list of all domains using the same IP address, or the same octet (fourth number from 0 to 255). If you have a VPS or a dedicated server, then all the domains can be presumed to be controlled by you, but if you went to some generic shared hosting provider, your sites would be among tens of thousands of others and much harder to identify, unless you were silly enough to use names resembling news outlets.

Here are the 248 sites that I could find from three hosting providers, Unified Layer, Data Foundry, Four Media Group. I did not waste time looking up these providers or the remaining sites any further:

  • 24hourscalgary.com
  • 24hoursedmonton.com
  • 24hoursottawa.com
  • 24hoursvancouver.com
  • 3newsagency.com
  • 4newsagency.com
  • aberystwythtimes.com
  • acadianrecorder.com
  • accionobrera.com
  • akhbarulusbua.com
  • albanydailydemocrat.com
  • al-insaniyyah.com
  • al-jamahir.com
  • al-mabda.com
  • almalayin.com
  • al-malayin.com
  • al-mukafih.com
  • almustaqilla.com
  • alqaidah.com
  • al-qaidah.com
  • al-watandaily.com
  • badischesvolksecho.com
  • baltimoreeveningherald.com
  • baltimoreeveningsun.com
  • baltimoremorningherald.com
  • barladul.com
  • brightonherald.com
  • brownsvilletimes.com
  • bucharestbusinessweek.com
  • buffaloenquirer.com
  • calcutta-gazette.com
  • cambridgeintelligencer.com
  • canadianillustratednews.com
  • cbs-cable.com
  • ceylondailymirror.com
  • comcast-network.com
  • congregationalherald.com
  • courrierdethiopie.com
  • dailystatesentinel.com
  • derdeutschecorrespondent.com
  • derkampf.com
  • dernordstern.com
  • dernordwesten.com
  • dernord-westen.com
  • derostasiatischelloyd.com
  • detroitsundayjournal.com
  • deutscheshanghaizeitung.com
  • diariodemanila.com
  • dieeinigkeit.com
  • die-einigkeit.com
  • easternmorningnews.com
  • echodelasambre.com
  • eestiaeg.com
  • elbiendelobrero.com
  • essexgazette.com
  • falceemartello.com
  • finnmarkfremtid.com
  • fournewsagency.com
  • foxfootychannel.com
  • frontulplugarilor.com
  • garydailytribune.com
  • gazetteandsentinel.com
  • goldcoastmail.com
  • golostruda.com
  • greateastlandtelevision.com
  • hamevasser.com
  • hardangerarbeiderblad.com
  • hartfordcitycourier.com
  • hartfordcitydemocrat.com
  • hayatechchaab.com
  • heiminshimbun.com
  • houstoneveningjournal.com
  • houstonmorningchronicle.com
  • huashangdaily.com
  • indianapolisdailyherald.com
  • israelshtime.com
  • kansascityjournalpost.com
  • karjalanmaa.com
  • kentuckyirishamerican.com
  • khalsa-akhbar-lahore.com
  • labanderaroja.com
  • ladomenicadelcorriere.com
  • lailustracionfilipina.com
  • lajeunebelgique.com
  • lanouvelleinternationale.com
  • lecanadien.ca
  • lechodukatanga.com
  • lecommuniste.com
  • leedstimes.co.uk
  • legrutleen.com
  • leninshilzhas.com
  • lepaysdefrance.com
  • lereveildutadla.com
  • lereveiljuif.com
  • liverpoolcourier.com
  • ludhiana-times.com
  • lyonsherald.com
  • manchesterexaminer.com
  • manchestertimes.co.uk
  • memphismorningnews.com
  • metroeastjournal.com
  • miamivalleychannel.com
  • minneapoliseveningjournal.com
  • mirat-ul-akhbar.com
  • montrealdailynews.com
  • moskovskykorrespondent.com
  • msnbc.uk
  • nasisten.com
  • neweveningpost.com
  • newyorkcourierandenquirer.com
  • newyorkeveningjournal.com
  • newyorkjournalamerican.com
  • newyorkmorningtelegraph.com
  • newyorknationaldemocrat.com
  • newyorkpressagency.com
  • newyorksundaynews.com
  • niagaranewstv.com
  • northchinadailynews.com
  • northotagotimes.com
  • northwestradio.ca
  • oransocialiste.com
  • pekinggazette.com
  • philippinesdailyexpress.com
  • plymouthtribune.com
  • portlandeveningjournal.com
  • protitisaigialeias.com
  • qatar-chronicle.com
  • quebecherald.com
  • rochesterdailyamerican.com
  • rockportjournal.com
  • rockvilletimes.com
  • russkoyeznamya.com
  • russkyinvalid.com
  • saltlaketelegram.com
  • schweizamsonntag.com
  • shanghaieveningpostandmercury.com
  • shanghaijewishchronicle.com
  • sindhgazette.com
  • singainesan.com
  • socialistweekly.com
  • sovietweekly.com
  • spoknippet.com
  • srilankadeepa.com
  • swatantranepali.com
  • sydney-gazette.com
  • theadaircountynews.com
  • theamericanweekly.com
  • theaustraliancommunist.com
  • thebangkokrecorder.com
  • thebaptisttimes.com
  • thebombaychronicle.com
  • thecanadianspectator.com
  • theceylonherald.com
  • thecharlottesvilletribune.com
  • theclevelandgazette.com
  • thecolombojournal.com
  • thedearbornindependent.com
  • thedublingazette.com
  • thehazletonnews.com
  • thehoovergazette.com
  • thejewishtribune.com
  • thekamloopsdailynews.com
  • thekungsheungdailynews.com
  • theliverpoolherald.com
  • theliverpoolnews.com
  • thelouisvilleheraldpost.com
  • thelouisvilletimes.com
  • themadrastimes.com
  • themirrorofaustralia.com
  • thenevadajournal.com
  • thenewzealandtablet.com
  • thenorfolkweeklynews.com
  • theoregonjournal.com
  • thequebectelegraph.com
  • thesandbornherald.com
  • theseattlestar.com
  • thesenator.eu
  • thestatesman.eu
  • thetimesofceylon.com
  • thetorontomail.com
  • thetulsatribune.com
  • thewellingtonindependent.com
  • thewhitesvilleindependentpress.com
  • threemediagroup.com
  • threenewsagency.com
  • timesofalaska.com
  • timesofambala.com
  • timesofamsterdam.com
  • timesofargentina.com
  • timesofaustria.com
  • timesofazadkashmir.com
  • timesofbali.com
  • timesofbelgium.com
  • timesofbern.com
  • timesofbhutan.com
  • timesofbonn.com
  • timesofbulgaria.com
  • timesofcanberra.com
  • timesofcebu.com
  • timesofchiangmai.com
  • timesofchile.com
  • timesofcostarica.com
  • timesofcroatia.com
  • timesofcyprus.com
  • timesofdefence.com
  • timesofeqypt.com
  • timesofestonia.com
  • timesofhonduras.com
  • timesofhungary.com
  • timesofjakarta.com
  • timesofjeddah.com
  • timesofkazakhstan.com
  • timesoflatvia.com
  • timesoflibya.com
  • timesoflosangeles.com
  • timesofluxembourg.com
  • timesofmacau.com
  • timesofmadinah.com
  • timesofmadrid.com
  • timesofmanitoba.com
  • timesofmecca.com
  • timesofmedina.com
  • timesofmorocco.com
  • timesofmoscow.com
  • timesofnaples.com
  • timesofnetherlands.com
  • timesofnewbrunswick.com
  • timesofnorthkorea.com
  • timesofpalau.com
  • timesofperu.com
  • timesofportugal.com
  • timesofpyongyang.com
  • timesofriyadh.com
  • timesofromania.com
  • timesofsaotome.com
  • timesofseattle.com
  • timesofseoul.com
  • timesofsouthchinasea.com
  • timesofsouthkorea.com
  • timesofspain.com
  • timesoftokyo.com
  • timesofvatican.com
  • timesofvenezuela.com
  • tokyonichinichishimbun.com
  • topekastatejournal.com
  • torontotelegram.com
  • weeklylouisianian.com
  • worldeconomicherald.com

Just cast your eye across some of those names above. Some were chosen wisely, such as legitimate news outlets that once existed but are long defunct. Others are too fanciful to be credible. Visit some of those sites and ask yourself why would someone put up a site with the stories you see there?

There are numerous other SEO omissions that are best left unstated, as there is no value in enlightening the amateurs behind these sites. Many of them are being taken down as we speak, replaced with parked pages.

Some of the coverage of the incident by the news media:

Added: 11 December 2020 – There is a further update:

Mastodon