Searching for Potential Propaganda Vehicle Presence in the DNS | WhoisXML API

Threat Reports

Searching for Potential Propaganda Vehicle Presence in the DNS

PAPERWALL, an ongoing propaganda campaign targeting 30 countries in Europe, Asia, and Latin America, recently caught the attention of several threat research firms.1 And that is not surprising since spreading propaganda has become a popular means to influence the way people, including powerful political and economic figures, make national or even international decisions.

We analyzed 132 PAPERWALL indicators of compromise (IoCs) to uncover other potentially connected artifacts and found:

  • 681 email-connected domains
  • One additional IP address
  • One IP-connected domain
  • 193 string-connected domains, one of which turned out to be malicious

Download a sample of the threat research materials now or contact us to access the complete set of research materials.

  • [1] https://citizenlab.ca/2024/02/paperwall-chinese-websites-posing-as-local-news-outlets-with-pro-beijing-content/
Try our WhoisXML API for free
Get started