Table of Contents
Dedicated Spam Domains
The domains listed below are automated spam sources, predominantly to drive web traffic to ad farms using scraped and republished content, often repurposed using LLM/AI bots.
These services usually hide the local timeline, have no contact information, and/or hide the user account directory.
These services are now included in the IFTAS DNI list and/or the IFTAS Abandoned and Unmanaged Domain (AUD) Denylist
| Service | Domain Statistics | Posts Per Day | Notes |
| channels dot im | FediIndex | 6,500 | ad farms at numerous sites including alojapan[.]com, rawchili[.]com, girlselfie[.]com |
| newsbeep dot org | FediIndex | 2,500 | ad farm at newsbeep[.]com |
| pravda dot me | FediIndex | 2,300 | Mass re-posting of Russian news sources, and 200,000+ inauthentic accounts performing fake interactions |
| pubeurope dot com | FediIndex | 12,000 | ad farm at europesays[.]com |
| social dot freysa dot ai | FediIndex | 92,500 | 3.9 million LLM-created posts |
| theater dot im | FediIndex | 400 | ad farms at numerous sites including gulfchannels[.]com, dramachina[.]com, thaidramas[.]com, sinotheater[.]com, esdrama[.]com, ptdrama[.]com |
| vive dot im | FediIndex | 700 | ad farms at numerous sites including diningandcooking[.]com, allforgardening[.]com, bocvip[.]com, fogolf[.]com, flakefood[.]com, laviezine[.]com |
Abandoned / Unmanaged Domains
The following domains allow new account creation and have either rejected or ignored our requests to remove egregious spam; or are clearly abandoned. These servers are repeatedly used by spam sources. All servers that display admin contact details have been contacted using all available methods to ascertain their status.
Please note, the table of domains has been removed from this page, these services are now included in the IFTAS DNI list and/or the IFTAS Abandoned and Unmanaged Domain (AUD) Denylist
Coordinated Network Spam Accounts
The account names listed below are associated with a state-sponsored Russian propaganda network (“Pravda Network / PortalKombat“) identified in September 2025. For more context see our related blog post and https://bsky.app/profile/antibot4navalny.bsky.social/post/3m22256476k25
Additional indicators of compromise (IOCs) that would identify these accounts as being part of the network include
- a dozen or so followers (often to related accounts created on related domains)
- linking to pro-Russia Telegram channels
- masquerading as legitimate news organisations
The accounts are created and left alone for a short period, and will have no posts for up to week, sometimes more.
If you choose to report or flag an account you believe to be associated, include a link to https://about.iftas.org/2025/10/05/coordinated-pro-russian-propaganda-network-targeting-activitypub-and-atproto-services/ for the relevant service moderation team to review.
Re-used Usernames
These represent some of the usernames that have been used more than once by the network.
| indiereports |
| alt-mirror |
| iskand3r |
| yars |
| ukrdef |
| kaconi |
| bulava |
| winixa |
| indienews |
| altnews |
| rubicon |
| observer |
| zircon |
| ushkuynik |
| gosling |
| infogram |
| oreshnik |
| artvara |
| kvn |
| opinion |
| state404 |
| xobef |
| pyatnashka |
| khairi |
| iskander24 |
| jodedob |
| rvps2001 |
| lancet24 |
| anti-fake |
| zztop |
| sputnik |
| gramfeed |
| indiemedia |
| liberty-reports |
| altz |
| mirrorgram |
| molniya |
