Dominion Election Systems in Michigan Connected to Servers in Taiwan and Germany (Taiwan, Germany)

This is the most technically precise foreign-connectivity finding in the 2020 evidentiary record. CyFIR LLC forensic examiner Ben Cotton, pursuant to court authorization in Bailey v. Antrim County, documented in sworn affidavits of April 9, 2021 and June 8, 2021, the recovery of two foreign IP addresses from the unallocated space of a Dominion ImageCast X (ICX) touchscreen voting device used in the November 2020 Michigan election: (1) IP 120.125.201.101 – registered to the Ministry of Education Computer Center, 12F, No. 106, Sec. 2, Hoping E. Rd., Taipei, Taiwan 106; and (2) IP 62.146.7.79 / 62.146.7.95 – registered to a cloud provider in Nuremberg, Germany (EDV-BV GmbH / QSC Subkunde). The ICX machine itself was manufactured in Taiwan and shipped to the United States via China Airlines, establishing a documented physical supply chain connection to the jurisdiction whose government IP address was recovered from the device’s storage. Unallocated space artifacts indicate prior communications with these foreign addresses; forensic dating requires additional analysis. Separately, Cotton’s Second Affidavit (June 8, 2021) documented anonymous remote logon activity on the Antrim County EMS on November 5, 2020 (two days post-election) and November 17, 2020 (the date of the Wayne County certification controversy). Cotton concluded: “given evidence of anonymous remote access on both dates, it is likely that the same actor had access prior to November 4th, using precisely the same techniques.” Critically, all server security logs prior to November 4, 2020 – the records that would have tracked foreign IP connections during the election – were systematically deleted while prior-year logs on the same system remained intact, constituting both a separate evidentiary crime and a deliberate foreclosure of the foreign-access investigation.