Security Scan Report: whosontheballot.org

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 5 domains to perform 33 HTTP transactions. The main domain is whosontheballot.org and was registered 15 years ago.

Submitted URL: https://whosontheballot.org/

AI Security Verdict

Low Risk

Confidence: 82%

2
Risk Score

Established NYC election info site with no phishing, malware, or credential forms; low risk, but one unrelated casino keyword suggests possible SEO spam injection.

Risk Factors (1)
Unrelated Hungarian casino keyword in election content may indicate SEO spam injection or a low-level site compromise.
Safety Factors (5)
Established domain age of over 15 years
Self-branding matches the domain and no different brand is impersonated
No credential-harvesting or payment forms
No threat-intelligence, hunting rule, IDS, or malicious JavaScript findings
Official election-related outbound links and institutional affiliation described on the page
Domain age information unavailable

Details

Page Title

Who's On The Ballot | Everything you need to know about NYC elections!

Scan Type

public

Domain Name Analysis

You're looking at domain 'whosontheballot.org' on the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The second-level label 'whosontheballot' is 15 characters long holding five vowels versus ten consonants. Breaking it apart gives 4 words: who, son, the, ballot. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://whosontheballot.org/

Page Load Overview

4.80s
Total Load Time
673 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,675 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
67%
government public service
41%
news media journalism
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8206.188.193.126Ashburn, Virginia, United States
AS26337Oso Grande IP Services, LLC
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5104.16.41.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.250.154.97Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5104.16.40.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
336--

Detected Technologies10

WordPressv3.4.1
100%
JQueryv1.7.2
100%
100%
50%
OpenRestyv1.31.1.1
40%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19352E963DCDD8C7B030106D0E075B25CD25B853FFB405C5CFABE06A5A7E1E94816E196

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:jstcgamjZPTQ80S7iuJBST3l0DiblzKgcMR5JhCV44wrXs2mpgtAulrt7WkSq+:utTQ8X7iuJBSaO5Jtsz6rt7WkSq+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14394:AqKQOxkhnKKKApgpBQL/AAvBQDSAQAHOBRBtAEGEEAh8ABodELZLC41GwBwtChpJwBNCsGwSAiRlIccyBrFlBSUyWQoEnQEW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffe7c3c3c3c00
Perceptual Hash:d2fc2c827cd2e4c3
Difference Hash:343be869e9e9e9c5
Wavelet Hash:df1cfc3c3c3c3c00
Color Hash:#55783a

Scan History

Scan history not available

Unable to load historical scan data