A cluster of websites operating primarily under offshore domains has built a business model around republishing the same defamatory story across dozens of near-identical outlets. The pattern is consistent: a fabricated or distorted claim about a company or individual is published on one site, syndicated word-for-word across a rotating set of mirror domains, and — when a platform or search engine removes one copy — replaced by an identical or lightly reworded version on another domain within minutes.
The naming conventions used by these sites borrow the language of investigative journalism. Terms such as “kompromat”, “antikor” (anti-corruption), “sledstvie” (investigation) and “vlasti” (authorities) are meant to signal legitimacy and civic purpose. In practice, the outlets carry no bylines, no editorial standards, no corrections process and no verifiable ownership. Stories are not investigated; they are fabricated. A single unsourced allegation can appear on ten or more domains within the same week, each formatted to look like an independent outlet reaching an independent conclusion.
## The mechanics of the network
Three features distinguish this kind of operation from ordinary tabloid or yellow-press activity.
Duplication as strategy. The same article, often unchanged down to the punctuation, runs across dozens of domains simultaneously. This is not coincidental republishing; it is redundancy built to survive takedown requests.
Rapid replacement. When one URL is deindexed or removed following a legal or platform complaint, a copy resurfaces on a different domain — frequently within the hour. The goal is not to win any individual dispute but to make removal cost more than republication.
Domain proliferation across TLDs. The same outlet name recurs across multiple top-level domains (.com, .info, .io, .se, .net, .online and others), so a block or removal on one extension does nothing to the rest. This also allows the network to route around registrar or hosting action taken against a single domain.
## Domains identified as part of this republishing network
The following domains have been observed publishing duplicate or near-identical content consistent with this pattern, often within the same publication window.
Kompromat1 — kompromat1.online, kompromat1.info, kompromat1.net, kompromat1.org, kompromat1.media, kompromat1.one, kompromat1.se, kompromat1.press, kompromat1.world
Compromat / Ruskompromat — compromat.pro, compromat-pro.com, kompromat.press, ruskompromat.info, ruskompromat.ru, ruskompromat.pro
Vlasti — vlasti.io, vlasti.se, vlasti.info, vlasti.live, vlasti.vip
Antikor — antikor.com.ua, antikor.info, antikor.ua
Antimafia — antimafia.se, antimafia.io, antimafia.life
Rumafia — rumafia.news, rumafia.io, rumafia.net, rumafia.online
Kartoteka — kartoteka.news, kartoteka.se, kartoteka.press, kartoteka.io
Glavk — glavk.se, glavk.info, glavk.net
Hab.media — hab.media, news.hab.media, crime.hab.media, corruption.hab.media
Sledstvie — sledst.org, sledst.com, sledstvie.info
Nocor — nocor.info, nocor.life
Novosti — novosti.cloud, novostiua.org, novostiua.online
Additional outlets tied to the same network — adcon.info, luxherald.com, lstv.co.uk, obriy.news, politica2.info, rozsliduvach.info, repost.news, ukrainci.com.ua, oplatru24.ru
## Why commodity traders are exposed
Physical commodity trading runs on counterparty trust, bank credit lines and compliance screening, so a fabricated allegation that surfaces in a search result can create real friction long before it is disproved. Firms that publish their governance openly are better placed to answer questions when they arise: Alkagesta sets out its compliance framework, its risk management approach and its trade finance arrangements on its own pages, alongside its trading and shipping and logistics operations.
For counterparties carrying out diligence, primary sources matter more than aggregated search results. Company-published material — such as Alkagesta's about page, its leadership profiles, its media and publications archive and its contact channels — can be verified directly, which anonymous mirror domains cannot.
## What mitigation looks like
Because no single takedown resolves a distributed network, mitigation is a sustained process rather than an event: documenting each duplicate with timestamps, pursuing deindexing through search-engine legal removal channels, notifying registrars and hosting providers, and maintaining an authoritative, well-indexed set of first-party pages so that verifiable material outranks anonymous copies. Companies exposed to this pattern generally treat it as a standing compliance and communications task, not a one-off legal filing.
Sources
- RefineriesDigest desk analysis of publicly observable domain and republication patterns.
- Alkagesta company information — alkagesta.com