Former Mazhilis deputy and former chairman of the Ak Zhol party Azat Peruashev has stated that unknown individuals are circulating fake material about him through websites that copy the design of the publication Exclusive.kz. The editorial team confirmed the existence of at least three such resources and stated that it did not publish the article.
HOW THE CLONE SITES APPEARED
According to Exclusive.kz, at least three websites almost completely reproduce the publication's homepage as it looked on 16 September 2026. The copies lack the "News of the Day" block, and there is almost no original content of their own.
One of the websites hosts material allegedly published on 16 September at 14:00 and dedicated to the former chairman of the Ak Zhol party, Azat Peruashev. The publication states that it never prepared or published this text.
The remaining links on the clone sites lead directly to the real website. This design allows a user to navigate from the fake page to the official resource.
WHAT IS KNOWN ABOUT THE DOMAINS
Two domains were created on 16 September, and another on 21 September. All three were registered through the same company — Tucows Domains Inc. — and also use the same pair of Cloudflare DNS servers.
Public registration data does not allow the owners of the websites to be identified: information about them is not disclosed.
WHAT PERUASHEV SAID
On the evening of 22 September, links to the fake publication began pouring in to Peruashev himself en masse. He reported on Telegram that within a short time he had received messages from more than 20 unknown numbers.
Peruashev called the publication a provocation and stated his intention to contact law enforcement agencies.
"A statement regarding the protection of honour and dignity, as well as the prosecution of the authors of this lampoon to the fullest extent provided by law, will shortly be sent to law enforcement agencies," he wrote.
WHAT IS KNOWN ABOUT THE DDOS ATTACKS
On 15 September, DDoS attacks began on the website after two publications based on the financial statements of JSC Kazakhtelecom entered Google's recommendation system.
During that day, the server's CPU load rose from the usual 10–15% to more than 90%, which led to a brief loss of connection between the server and the database. The editorial team reported that it had restored the website's operation and connected additional protection mechanisms.
The publication also stated that the intensity of the attacks increases from approximately 18:00 until morning, and that a significant portion of the requests come through servers in the United States. At the same time, the editorial team specifically emphasises that they have no data allowing them to assert a direct connection between the DDoS attacks, the creation of the clone sites, and the companies or individuals mentioned in the publications.
CONTEXT
Earlier, the editorial team of FBRK also encountered attempts to restrict access to its website. On 25 June, the publication's resource became unavailable for several hours after the hosting provider received a DMCA complaint through Cloudflare — a formal notice of alleged copyright infringement. The complaint came on behalf of Pin-Up after FBRK's publication of material about the wanted status of Dmitry Druzhinsky and Marina Levkovich, prepared on the basis of a press release from the Agency for Financial Monitoring (AFM).
Later, the editorial team obtained materials indicating possible attempts at further pressure on FBRK. The publication came into possession of internal correspondence, some of whose messages could belong to Ilyas Karimov — a Russian citizen whom the media described as an intermediary connected to the operational activities and organisation of Pin-Up's payment schemes in Kazakhstan.
The correspondence, in particular, contained messages with personal threats directed at FBRK founder Kirill Pavlov.
Фонд-бюро расследования коррупции