- \n
- TigerWeb has a confirmed long-standing infrastructural link to the Portal Kombat \/ Pravda network. Taken together, archival, contact and technical indicators confirm the company\u02bcs significant role in creating and administering the network\u02bcs websites, as well as the technical continuity between the early news aggregators, the later Pravda resources and TigerWeb\u02bcs infrastructure.<\/li>\n
- Portal Kombat \/ Pravda did not cease operations following its public exposure and the imposition of sanctions. The network continued to expand geographically and linguistically, automatically republishing content from russian state media and Telegram channels, and as of 2026 remains an active infrastructure for information influence.<\/li>\n
- Taken together, the current data confirm that TigerWeb\u02bcs operational and infrastructural link to the network persists. In the consolidated EU sanctions instrument as of July 2026, TigerWeb continues to be identified as the company operating Portal Kombat, while no publicly confirmed evidence has been found that the network was transferred to another identified technical operator. At the same time, an analysis of open-source data provides no grounds for stating that TigerWeb directly administers every active domain or is the operation\u02bcs sole strategic coordinator.<\/li>\n
- TigerWeb continues to operate as a web studio and states that it retains capabilities in web development, SEO promotion and digital advertising. The available data provide no grounds for concluding that formal control over the company has changed or that the network has been transferred to another operator.<\/li>\n
- Artemyev and Y. Vlasenko are listed on some of the network\u02bcs resources as members of the editorial and administrative team; however, no independently verified biographical, corporate or technical information has been found in open sources that would confirm that they are real persons or establish their actual role in the network\u02bcs operation. The absence of such data may indicate that V. Artemyev and Y. Vlasenko are fictitious persons whose names are used to provide a formal editorial attribution on the network\u02bcs resources.<\/li>\n
- The findings are consistent with the Center\u02bcs previous assessments of this information infrastructure. In January 2026, the Center separately analysed the ZOV network, which is aimed primarily at Ukrainian audiences, while in April 2026 a broader analytical material considered Portal Kombat as an ecosystem comprising the Pravda and ZOV segments.<\/li>\n
- Shevchenko and TigerWeb have been subject to European Union sanctions since 15 July 2025. On 25 August 2025, the Republic of Moldova also imposed national restrictive measures on Y. Shevchenko and TigerWeb. Both decisions link them to the operation of Portal Kombat and to coordinated information manipulation and interference.<\/li>\n
- For Ukraine, the TigerWeb case is an example of civilian web infrastructure being used to provide long-term technical support for information influence operations. The available body of evidence provides grounds for considering the imposition of sanctions on TigerWeb and Y. Shevchenko in Ukraine, alongside technical and partnership measures aimed at restricting the network\u2019s continued operation.<\/li>\n<\/ul>\n
1. Overview of TigerWeb<\/strong><\/p>\n
![\"\"](\"https:\/\/cpd.gov.ua\/wp-content\/uploads\/2026\/08\/1.jpg\")
<\/p>\nTigerWeb presents itself as a web studio in Simferopol providing website development, design, search engine optimisation (SEO), advertising campaigns, hosting and technical support. The company’s official website<\/a> remained accessible as of 21 August 2026; its footer states the operating period as \u20182015-2026\u2019. Meanwhile, the TigerWeb jobs page<\/a> states that recruitment is ongoing and lists vacancies for a web developer, a SEO specialist and a contextual advertising specialist as current. Thus, TigerWeb not only maintains a public presence but, at least on its own website, also demonstrates current operational capacity in the areas required to create, maintain and promote web resources.<\/p>\n
This assessment is supplemented by registry data on the russian legal entity. According to its RBC Companies profile<\/a>, TigerWeb LLC is listed in the register of recipients of state support as an active legal entity, although it has received no such support over the past year.<\/p>\n
At the same time, TigerWeb\u2019s activities began long before the russian legal entity was registered. DFRLab and CheckFirst<\/a> trace TigerWeb\u2019s operation as a web agency back to at least 2013, whereas TigerWeb LLC was registered under the laws of russia in 2019. In the European Union sanctions materials<\/a>, TigerWeb is identified by registration number 1199112018973 and the website tigerweb.ru and is described as the company operating Portal Kombat. The TigerWeb team page<\/a> currently identifies \u2018Denis\u2019 as the studio\u2019s founder and \u2018Yevgeny\u2019 as head of backend. Because the page provides no surnames or other identifying details, these designations provide no grounds for concluding that formal control over the company has changed and do not rebut the official identification of Yevgeny Shevchenko as TigerWeb\u02bcs founder in sanctions documents.<\/p>\n
2. Yevgeny Shevchenko<\/strong><\/p>\n
![\"\"](\"https:\/\/cpd.gov.ua\/wp-content\/uploads\/2026\/08\/photo_2026-08-23_17-17-41.jpg\")
<\/p>\nIn European Union sanctions instruments, Yevgeny Shevchenko is identified as the founder of TigerWeb. The DFRLab \/ CheckFirst investigation<\/a> traces his involvement in developing the network of news aggregators linked to the company back to at least 2011, when Y. Shevchenko was involved in creating the Crimean aggregator Crimea News. The researchers regard this resource as an early precursor to the later Pravda ecosystem; by 2013, TigerWeb was already operating as a web agency, while from 2014 resources began to appear that shared technical characteristics with tigerweb.ru.<\/p>\n
According to the archived CV cited in the DFRLab \/ CheckFirst study<\/a>, Y. Shevchenko worked as a project manager at \u2018Crimean Technologies\u2019 (\u041a\u0440\u044b\u043c\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438) in 2015-2016. DFRLab notes that this entity developed digital resources for the russian administration of temporarily occupied Crimea, including its government portal. This episode confirms his long-standing professional activity in Crimea\u2019s IT sector following the occupation of the peninsula.<\/p>\n
Following the start of the full-scale war, TigerWeb also continued to work with clients from occupation authorities. In 2021, the company created a website for the \u2018Republican Valuation Centre\u2019 (\u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043e\u0446\u0435\u043d\u043a\u0438), and DFRLab \/ CheckFirst<\/a> established that in December 2022 this entity was engaged by the russian occupation administration of Zaporizhzhia Oblast to provide property valuation services.<\/p>\n
On 15 July 2025, Y. Shevchenko was added to the EU sanctions list. The Council of the EU\u2019s official statement of reasons<\/a> identifies Y. Shevchenko as a citizen of russia and the founder of TigerWeb, with tax identification number 910202780107. The document links his activities to the operation of Portal Kombat and to involvement in coordinated information manipulation and interference that threaten the stability and security of the European Union or one or more of its Member States.<\/p>\n
The attribution of Y. Shevchenko is not based solely on the sanctions decision. VIGINUM<\/a> explicitly identifies him as one of TigerWeb\u2019s founders and states that he has been involved in website development and maintenance since at least 2013. DFRLab \/ CheckFirst<\/a> additionally trace the links between his professional activities and TigerWeb\u2019s infrastructure and the early generations of websites that subsequently evolved into Portal Kombat \/ Pravda. Taken together, these independent sources make Y. Shevchenko\u2019s link to the network\u2019s technical infrastructure considerably better substantiated.<\/p>\n
3. Attribution of TigerWeb to Portal Kombat \/ Pravda<\/strong><\/p>\n
The most systematic initial attribution of TigerWeb\u2019s role was published by VIGINUM, France\u2019s service for protection against foreign digital interference. In the second part of its Portal Kombat investigation, dated 14 February 2024<\/a>, VIGINUM identified TigerWeb\u2019s significant role in creating and administering the network\u2019s websites. The attribution was based on a combination of archival, contact and technical indicators, rather than solely on the content of publications.<\/p>\n
Archived versions of some network resources displayed the TigerWeb logo with the label \u2018Development and technical support\u2019, indicating the company\u2019s role as a developer and technical contractor. VIGINUM<\/a> also found the email address topnewsua7@gmail.com on older copies of the websites and linked it to Y. Shevchenko; on TigerWeb\u2019s website, it found a URL containing the domain lugansk-news.ru. Taken together, these indicators linked TigerWeb\u2019s commercial infrastructure to the network\u2019s early resources.<\/p>\n
At the same time, VIGINUM<\/a> did not equate the technical implementer with the operation\u2019s strategic client: the French service separately hypothesised that TigerWeb may have acted as a service provider for another operator whose identity had not been established at the time. The evidence therefore confirms TigerWeb\u2019s significant role in creating and administering the network, but does not prove that the company alone determined all information tasks or was the sole decision-making centre.<\/p>\n
In February 2025, DFRLab and CheckFirst<\/a> independently corroborated and expanded the technical attribution. The researchers identified a shared Google AdSense code between tigerweb.ru and several news websites, historical DNS\/IP overlaps, shared Google Analytics identifiers on early resources, and SSL certificates listing tigerweb.ru as a domain name on servers in REG.RU ranges. They also established that the old \u2018-news\u2019 websites and the new Pravda resources use the same internal application programming interface (API) with the same parameters, demonstrating technical continuity between different generations of the network.<\/p>\n
4. Evolution of the Network and the Pravda \/ ZOV Segments<\/strong><\/p>\n
According to VIGINUM<\/a>, in February 2024 Portal Kombat comprised 193 information portals. On 29 April 2024, VIGINUM<\/a> reported that the network had expanded to 224 portals targeting audiences in almost all EU Member States, as well as in several African and Asian countries. The network evolved from local russian and Ukrainian aggregators into a multilingual infrastructure that generally does not create original content, but automatically relays material from russian state media, official bodies and pro-russian accounts.<\/p>\n
Following its exposure, the network was not shut down. DFRLab \/ CheckFirst<\/a> recorded its further expansion in 2024-2025 and the gradual centralisation of much of the infrastructure around news-pravda.com. At the beginning of 2025, the researchers identified 140 subdomains targeting more than 83 countries and regions. A DFRLab study dated 3 April 2026<\/a> states that the network continues to operate through more than 150 websites and automatically translates and disseminates content in more than 80 languages. As of March 2026, its five most frequently used sources included TASS, RIA Novosti, Lenta, Komsomolskaya Pravda and RT. Some of these media outlets or associated with them entities are subject to sanctions or other restrictive measures; retransmission of their content through nominally separate domains therefore effectively creates an additional channel for circumventing sanctions restrictions on the distribution of russian state content.<\/p>\n
The network\u2019s scale and persistence are further confirmed by the DFRLab and CheckFirst online platform<\/a>, which aggregates data from identified Pravda \/ Portal Kombat resources and is updated hourly. The researchers report more than 3.7 million publications that repurposed material from russian media and disseminated messages from dubious Telegram channels; the project\u2019s interactive map tracks the network\u2019s reach across more than 110 countries and regions. A separate DFRLab \/ CheckFirst study<\/a> also records citations to Pravda domains on Wikipedia, in X Community Notes and in responses from popular artificial intelligence systems, expanding the network\u2019s potential influence beyond its own websites.<\/p>\n
The Center has also repeatedly covered the activities of this infrastructure. In a publication dated 31 March 2025<\/a>, the Center described the Pravda network\u2019s role in the mass replication of pro-russian messages that may subsequently appear in responses generated by artificial intelligence systems. On 14 January 2026, the Center published a separate analytical report on the ZOV network<\/a>, which is aimed primarily at Ukrainian audiences. As of the beginning of 2026, the Center had identified 68 websites, 40 Telegram channels and 40 VKontakte pages in this segment, localised for 23 regions and 17 major Ukrainian cities.<\/p>\n
In a subsequent analytical report by the Center<\/a> entitled \u2018Discrediting Ukraine amid Escalating Events in the Middle East\u2019, Portal Kombat is considered a broader ecosystem that can be divided into two main segments: Pravda, aimed primarily at international audiences, and ZOV, focussed on Ukraine. This approach is consistent with DFRLab \/ CheckFirst\u2019s technical findings on the shared architecture of the older \u2018-news\u2019 network and the newer Pravda network. Thus, treating ZOV separately is useful for analysing target audiences and content localisation, but does not mean that it lacks an infrastructural link to the broader Portal Kombat ecosystem.<\/p>\n
![\"\"](\"https:\/\/cpd.gov.ua\/wp-content\/uploads\/2026\/08\/photo_2026-08-23_17-23-22.jpg\")
<\/p>\n5. Does TigerWeb Retain an Operational Role in the Network<\/strong><\/p>\n
Data available as of August 2026 support the assessment that TigerWeb\u2019s link to Portal Kombat \/ Pravda persists. First, in July 2025, the Council of the EU<\/a> imposed sanctions on TigerWeb and Y. Shevchenko specifically in connection with the operation of Portal Kombat. In the consolidated version of Council Regulation (EU) 2024\/2642 as at 13 July 2026<\/a>, TigerWeb continues to be described as the company operating this information manipulation project.<\/p>\n
Second, in April 2026, DFRLab<\/a> explicitly identified TigerWeb as the company behind the Pravda Network and recorded that the network continued to operate following the EU sanctions. Third, the 2025 DFRLab \/ CheckFirst technical study<\/a> demonstrates continuity between different generations of websites through shared application programming interfaces and server, analytics and advertising markers. In addition, TigerWeb\u2019s own website<\/a> was not only operational as of August 2026 but also listed current vacancies in web development, SEO and digital advertising, meaning that the company publicly states that it retains capabilities in areas directly relevant to maintaining such web infrastructure. No publicly confirmed evidence has been found that the network was transferred to another identified technical operator.<\/p>\n
At the same time, available open sources do not make it possible to establish TigerWeb\u2019s actual access to every active registrar account, DNS zone, administration panel or server account. It is therefore accurate to refer to TigerWeb\u2019s continuing operational and infrastructural link to the network, rather than to the company\u2019s documented day-to-day administration of every individual resource. Similarly, the available body of evidence provides no grounds for identifying TigerWeb as the sole strategic client behind the entire operation, as VIGINUM<\/a> allowed for the possibility that the company acted as a technical provider for another unidentified operator.<\/p>\n
Thus, TigerWeb\u2019s role in creating and administering the network is documented, and current official and research sources continue to link the company to its operation. There is no confirmed evidence that the technical operator has changed; at the same time, open sources do not detail the specific extent of TigerWeb\u2019s current control over individual resources.<\/p>\n
6. Victor Artemyev and Yuri Vlasenko<\/strong><\/p>\n
The appearance of the names Victor Artemyev and Yuri Vlasenko on some of the network\u2019s resources warrants separate attention. In 2025, DFRLab<\/a> recorded that, following an update to dnr-news.ru in 2024, V. Artemyev and Y. Vlasenko were presented as members of a new editorial team. The researchers interpreted this change primarily as an attempt to give the resource a more professional and transparent appearance, rather than as confirmation that a new technical operator had emerged for the network.<\/p>\n
As of August 2026, the same correspondence between names and roles appeared on several similar resources. In particular, on the pages \u2018Lenta novostey Kharkova\u2019<\/a> and \u2018Lenta novostey Kharkova Odesa\u2019<\/a>, V. Artemyev is listed as the owner and editor-in-chief, and Y. Vlasenko as the administrator. The repetition of the same names and functions across similar websites is consistent with the network\u2019s centralised presentation template, but does not in itself prove that these individuals actually control the domain or server infrastructure.<\/p>\n
Furthermore, no independently verified biographical, corporate or technical data have been found in open sources that would confirm that V. Artemyev and Y. Vlasenko are real persons, establish their actual role in the network\u2019s operation, or show that TigerWeb\u2019s functions were transferred to them. The absence of such information, combined with the repetition of the same names and roles across similar resources, may indicate that they are fictitious persons whose names are used to provide formal editorial attribution on the websites. The mere appearance of these names in editorial sections should therefore be treated as a separate indicator for further identification, but not as evidence that the technical operator of Portal Kombat \/ Pravda has changed.<\/p>\n
7. Sanctions Status and Relevance to Ukraine<\/strong><\/p>\n
On 15 July 2025, the Council of the EU added TigerWeb and Y. Shevchenko to the sanctions list. The Implementing Regulation (EU) 2025\/1444<\/a> identifies Y. Shevchenko as TigerWeb\u2019s founder and the company as a Crimean web entity that operates Portal Kombat and engages in coordinated information manipulation and interference. The consolidated version of Council Regulation (EU) 2024\/2642 as at 13 July 2026<\/a> retains this designation. On 25 August 2025, the Republic of Moldova also imposed national restrictive measures<\/a> on Y. Shevchenko and TigerWeb.<\/p>\n