Is findvoters.com safe?

The scan of findvoters.com on 19 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with findvoters.com?

1 analysed samples communicate with this URL, including Phishing.

How was findvoters.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

findvoters.com - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned findvoters.com and returned a unknown verdict (score -6). The page resolved to 76.223.105.230 on Amazon.com, Inc. in US. The domain was registered 5026 days ago through GoDaddy.com, LLC. 4 domains and 2 IPs were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 2 redirects before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -6) · Confidence 12%
Scanned URL: http://www.findvoters.com/userfiles/file/64038150782.pdf
Domain: findvoters.com · IP: 76.223.105.230 · AS16509 · US
Server: DPS/2.0.0+sha-2b44a88
Page title: Find Voters
HTTP status: 404 · text/html;charset=utf-8
Registrar: GoDaddy.com, LLC · domain age 5026 days · created 2012-11-14
TLS issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2 · valid to Dec 28 14: · subject CN=findvoters.com
HTTP requests captured: 6
Scan tier: standard · observed 2026-08-19 15:03:09 UTC

Redirect chain

http://www.findvoters.com/userfiles/file/64038150782.pdf
http://findvoters.com/userfiles/file/64038150782.pdf
https://findvoters.com/userfiles/file/64038150782.pdf

Malware communicating with this URL (1)

These samples were observed contacting or being served from findvoters.com. Each links to its full analysis.

Phishing - referenced · d9a8a89893e43501b5b849db4e903bb2 · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Contacted infrastructure

76.223.105.230 - AS16509 Amazon.com, Inc. (United States)
13.248.243.5 - AS16509 Amazon Technologies Inc. (United States)

Observed indicators

findvoters.com
img1.wsimg.com
pagead2.googlesyndication.com
cdn.trustedsite.com
76.223.105.230
13.248.243.5
https://findvoters.com/userfiles/file/64038150782.pdf
https://findvoters.com/manifest.webmanifest
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:57,h:57,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:60,h:60,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:72,h:72,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:114,h:114,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:120,h:120,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:144,h:144,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:152,h:152,m
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=w:180,h:180,m
https://findvoters.com/
https://img1.wsimg.com/isteam/ip/0917af0a-87f8-47ec-b294-4c6f42c86650/Find_Voters_cmyk-and-greyscale_no-tagl-2bf79f8.jpg/:/rs=h:105,cg:true,m/qt=q:95
https://findvoters.com/columns
https://img1.wsimg.com/blobby/go/0917af0a-87f8-47ec-b294-4c6f42c86650/gpub/d9a99c2545da3b8c/script.js

Other scans of findvoters.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown · https://findvoters.com/userfiles/file/75038686764.pdf
23 Aug 2026 - unknown · https://findvoters.com/userfiles/file/75038686764.pdf
23 Aug 2026 - unknown · https://findvoters.com/userfiles/file/tazopimidi.pdf
20 Aug 2026 - unknown · https://findvoters.com/userfiles/file/76501435718.pdf
20 Aug 2026 - unknown · https://findvoters.com/userfiles/file/76501435718.pdf
19 Aug 2026 - unknown
19 Aug 2026 - unknown
16 Aug 2026 - unknown · https://findvoters.com/userfiles/file/37608048695.pdf
16 Aug 2026 - unknown · https://findvoters.com/userfiles/file/37608048695.pdf
16 Aug 2026 - unknown · https://findvoters.com/userfiles/file/37608048695.pdf

Questions about findvoters.com

Is findvoters.com safe?: The scan of findvoters.com on 19 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with findvoters.com?: 1 analysed samples communicate with this URL, including Phishing.
How was findvoters.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of findvoters.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan