The CIA didn't just infiltrate governments; it infiltrated the internet itself. For over a decade, Langley operated a sprawling network of covert websites that served as global spy terminals disguised as harmless blogs, news hubs, and fan pages.

Beginning in 2004, the CIA established a vast network of at least 885 websites, ranging from Johnny Carson and Star Wars fan pages to online message boards about Rastafari. Spanning 29 languages and targeting at least 36 countries directly, these websites were aimed not only at adversaries such as China, Venezuela, and Russia, but also at allied nations, including France, Italy, and Spain, showing that the United States treats its friends much like its foes.

Covert Soccer Blogs and Cracked Passwords

Gholamreza Hosseini is a former CIA informant. In 2007, the Tehran-based industrial engineer contacted the agency and offered to pass them information about Iran's nuclear energy program. His CIA handlers showed him how to use IranianGoals.com to communicate with them. Iranian Goals was a Farsi-language website that appeared to be dedicated to local soccer news. However, what appeared to be a search bar at the bottom of the home page was actually a password field. Typing the correct word into it would trigger a login process, revealing a secret messaging interface. Each informant had their own webpage, designed specifically for them, to insulate them from others in the network.

It seemed like an ingenious idea. However, Hosseini and the other spies were soon detected, thanks to some sloppy mistakes in Washington, D.C. An Iranian double agent revealed to the authorities their unique website, and some basic detective work led to the uncovering of the entire network.

The CIA purchased the hosting space for dozens, perhaps hundreds, of these websites in bulk, often from the same internet providers, or the same server space. That meant that the IP addresses of these websites were consecutive, akin to housing each informant in adjacent properties on the same street.

Thus, if you looked at neighboring IP addresses, you would see similarly designed websites and could easily put two and two together. Even with some relatively basic online searches, Iranian authorities were able to identify dozens of CIA-run websites. From there, they simply waited to see who would access them.