I am working on a git repo and a group effort to monitor the attack vectors mentioned in the billion-dollar disinformation campaign to reelect the president in 2020 : https://github.com/MassMove/AttackVectors … a quick intro: Presiding over this effort is Brad Parscale , a 6-foot-8 Viking of a man…

Thanks @mcoder . Everyone else, for context: I was offering some help getting started with the dataset and added the domain list to the scratchspace table. I’d be super curious to hear if anyone else can think of other insights we could glean from the dataset.

There are a few other places I’d look but in a quick initial glance it doesn’t look like they add much: Page-level information about the hosting: base_page_dns_server: "ns-1483.awsdns-57.org", base_page_ip_ptr: "ec2-3-218-216-245.compute-1.amazonaws.com", The site is running on an ec2 instance (n…

No, thank you @rviscomi ! 135 domains are served from that IP address: LocalJournals/sites.csv#L351-L485 , so I think you may be onto something! Can we query for all certificates or base_page_'s with the discovered IPs, in case we missed any with the conventional methods: https://github.com/MassMov…

Yep. Rick is much better with BigQuery than me but the requests dataset has both the IP address and certificate details so it should be a relatively easy json_extract and where clause. It’s worth noting that that IP address is what was being used yesterday, I don’t know if it was the same during t…

This query looks for any pages served from an IP of a website flagged in the massmove table: SELECT page, JSON_EXTRACT_SCALAR(payload, '$._ip_addr') AS ip_addr, NET.REG_DOMAIN(page) IN (SELECT domain FROM `httparchive.scratchspace.massmove`) AS flagged FROM `httparchive.requests.2020_02_01_…

Nice, thanks for that. Can you run another search for these tags: UA-147094394- and UA-63225229-? Just a month or two should be enough to start with!

How would we go about querying for the Facebook Pixel ID 485774048928360 and Quantserv tracking cookkie p-tBWRHfpb70G7L.gif?

Here’s a query that checks for the GA tags, Facebook pixel, and Quantserv ID all in one: SELECT url, REGEXP_EXTRACT(body, '(UA-147094394-|UA-63225229-|485774048928360|p-tBWRHfpb70G7L)') AS match FROM httparchive.response_bodies.2020_02_01_mobile WHERE REGEXP_CONTAINS(body, '(UA-147094394-|U…

did anyone click on these links? :eyes:

HTTP Archive project vs. state-backed disinformation operations

Analysis

rviscomi April 20, 2020, 5:01am 13

page	ga
https://action.idahosaa.org/	UA-60996284-
https://www.ohiogunowners.org/	UA-60996284-
https://action.iowagunowners.org/	UA-60996284-

Topic		Replies	Views
Identifying The Local Websites To Understand The State of The Web in A Country Analysis	14	3212	July 3, 2019
What are the effects of the COVID-19 pandemic on web usage and experience? Analysis	21	3367	July 2, 2020
Is there any way to download daily historical data about website performance (1 year period) in CSV or Excel format for different websites?	19	1708	October 19, 2022
HTTP/2 Adoption	21	9303	May 6, 2020
New dashboard: the Core Web Vitals technology report Analysis	16	16774	September 12, 2025

HTTP Archive project vs. state-backed disinformation operations

Related topics