WEBSITE ANALYSIS REPORT

http://bufsao.com/e/CdCBfdIQnyzvb

27 Sep 2026 · 19:37:41.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
adsco.re3 captured requests
bufsao.com6 captured requests
c.adsco.re1 captured requests
cdn.tsyndicate.com1 captured requests
cdnjs.cloudflare.com3 captured requests
displayvertising.com1 captured requests
driverhugoverblown.com6 captured requests
jgrax7gpcc2g.l4.adsco.re1 captured requests
jgrax7gpcc2g.n4.adsco.re1 captured requests
jgrax7gpcc2g.s4.adsco.re1 captured requests
jssdk.tsyndicate.com1 captured requests
m696yefd.s1q2105.com1 captured requests
s7-t25.97bf1.com3 captured requests
ssl.p.jwpcdn.com5 captured requests
usrpubtrk.com1 captured requests
ut.odylismnumina.com1 captured requests
www.displayvertising.com1 captured requests

Connections

bufsao.com → 4.adsco.reCalls2 captured connections
bufsao.com → 6.adsco.reCalls2 captured connections
bufsao.com → acscdn.comLoads from3 captured connections
bufsao.com → adexchangerapid.comCalls1 captured connections
bufsao.com → adsco.reCalls3 captured connections
bufsao.com → c.adsco.reLoads from1 captured connections
bufsao.com → cdn.tsyndicate.comLoads from1 captured connections
bufsao.com → cdnjs.cloudflare.comLoads from3 captured connections
bufsao.com → displayvertising.comLoads from1 captured connections
bufsao.com → driverhugoverblown.comCalls2 captured connections
bufsao.com → driverhugoverblown.comEmbeds1 captured connections
bufsao.com → driverhugoverblown.comLoads from3 captured connections
bufsao.com → jgrax7gpcc2g.l4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.n4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.s4.adsco.reCalls1 captured connections
bufsao.com → jssdk.tsyndicate.comLoads from1 captured connections
bufsao.com → m696yefd.s1q2105.comLoads from1 captured connections
bufsao.com → s7-t25.97bf1.comCalls3 captured connections
bufsao.com → ssl.p.jwpcdn.comLoads from5 captured connections
bufsao.com → usrpubtrk.comCalls1 captured connections
bufsao.com → ut.odylismnumina.comLoads from1 captured connections
bufsao.com → www.displayvertising.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:37:00.455 GET 200 document 40.2 KB 403 ms —

19:37:01.059 GET 200 script 145.1 KB 68 ms —

19:37:01.061 GET 200 stylesheet 48.2 KB 27 ms —

19:37:01.062 GET 200 script 164.9 KB 49 ms 1 alerts

19:37:01.065 GET 200 script 84.9 KB 39 ms —

19:37:01.066 GET 200 script 45.8 KB 39 ms —

19:37:01.072 GET 200 script 59.4 KB 36 ms —

19:37:01.074 GET 200 script 72.0 KB 59 ms —

19:37:01.077 GET 200 script 5 B 87 ms 1 alerts

19:37:01.079 GET 200 script 29.8 KB 76 ms —

19:37:01.083 GET 200 script 3.7 KB 27 ms —

19:37:01.085 GET 200 script 928 B 27 ms —

19:37:01.261 GET 200 script 76.5 KB 15 ms —

19:37:01.265 POST 200 fetch 469 B 179 ms —

19:37:01.329 GET 200 script 164.9 KB 24 ms 1 alerts

19:37:01.452 GET 200 script 66.2 KB 17 ms 1 alerts

19:37:01.453 GET 200 script 41.0 KB 42 ms 1 alerts

19:37:01.455 GET 200 script 2 B 69 ms —

19:37:01.526 GET 200 subdocument 957 B 17 ms —

19:37:01.543 GET 200 img 74.7 KB 137 ms —

19:37:01.586 GET 200 script 69.8 KB 15 ms —

19:37:01.589 GET 200 script 321.8 KB 23 ms —

19:37:01.592 GET 200 script 450.6 KB 27 ms —

19:37:01.680 GET 200 script 1.4 KB 18 ms —

19:37:01.682 POST 200 beacon 43 B 19 ms —

19:37:01.691 GET 200 script 96.0 KB 23 ms —

19:37:01.757 GET 200 script 70.2 KB 22 ms —

19:37:01.797 GET 200 xhr 174 B 1821 ms 1 alerts

19:37:01.799 GET 200 img 5.1 KB 674 ms —

19:37:01.882 POST 204 beacon 0 B 135 ms —

19:37:01.887 POST 204 beacon 0 B 446 ms —

19:37:01.889 POST 204 beacon 0 B 883 ms —

19:37:02.446 POST 200 beacon 43 B 18 ms —

19:37:02.516 GET 200 fetch 0 B 467 ms —

19:37:02.521 GET No response fetch 0 B 0 ms —

19:37:02.523 GET No response fetch 0 B 0 ms —

19:37:02.525 GET 200 fetch 45 B 34 ms —

19:37:02.532 GET 200 fetch 45 B 30 ms —

19:37:02.548 GET 200 fetch 952 B 785 ms 3 alerts

19:37:02.551 POST 204 beacon 0 B 211 ms 3 alerts

Transaction #12

Request / response

URL

POST HTTPS

https://usrpubtrk.com/ut/hb.php?cb=0.5132574860610547&v=1

IP / ASN

172.67.186.11

AS13335 · CLOUDFLARENET

Requested by: https://bufsao.com/e/CdCBfdIQnyzvb

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 21 Oct 2026 · 23:07:45.568 UTC
Times seen: 19268961

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: usrpubtrk.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: EF:23:F1:4F:A4:56:BA:B9:0B:25:F4:D1:A6:8C:6C:BC:66:3E:AD:A2
Valid from: Mon, 03 Aug 2026 15:19:36 GMT
Valid until: Sun, 01 Nov 2026 16:19:23 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /ut/hb.php?cb=0.5132574860610547&v=1 HTTP/1.1
Host: usrpubtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bufsao.com/
Content-Type: text/plain; charset=utf-8
Content-Length: 1328
Sec-Fetch-Storage-Access: none
Origin: https://bufsao.com
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=6

Response headers

HTTP/3 204 
server: cloudflare
date: Sun, 27 Sep 2026 19:37:02 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=96OZSt0%2BMHB7zuKBK0Z3N0sKQKD%2B7K7FW3JWBZs3TuXX4QuvMfUQ0gBQVN1jgLjaWNGZ8%2BUK0B%2FTuETZNARg0GR%2FPgTxc273A%2B1KTIgcRa1cUcquCQBgCrbjqlWKE8xy"}]}
priority: u=6,i=?0
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a41cf5ef38231fa7-CPH
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

Request body

Captured 1.3 KB · Displayed 1.3 KB

{"clientHints":{},"isScrollable":0,"totalClicks":0,"sessionLength":2,"ippMissclicks":0,"visible":1,"caught":0,"lastevent":0,"isFullscreen":0,"isTabFocused":1,"eventImps":0,"retryCounts":0,"isScrolled":0,"isMouseMoved":0,"pagePercentageSeen":100,"belowTheFoldSeen":100,"touchEnd":0,"touchMove":0,"clicksByType":{"idle":0,"input":0,"video":0,"button":0,"link":0,"img":0},"ufp":"Linux x86_64/Mozilla/Netscape/true/false/1280x10240en-USunknown824 bits","sessionStartTime":1790537821,"sessionId":"1536525aed96264249f813479d88d754","timeZoneOffset":0,"zones":["11299998"],"pUrl":"https%3A%2F%2Fbufsao.com%2Fe%2FCdCBfdIQnyzvb","pReferrer":"","pTitle":"The.Mandalorian.S03e08.Final..Multi.1080P.Vostfr","pDescription":"","pKeywords":"","pHasIframes":1,"pWidth":1280,"pHeight":974,"vWidth":1280,"vHeight":974,"inIframe":0,"bsd":"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImRvZXNVQUNvbnRhaW5IZWFkbGVzc0tleXdvcmQiOmZhbHNlLCJpc1dlYkRyaXZlclByZXNlbnQiOmZhbHNlLCJpc0NEUERldGVjdGVkIjpmYWxzZSwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOmZhbHNlLCJpc1dpbmRvd0NEQyI6ZmFsc2UsImlzRmlyZWZveE1pc21hdGNoIjpmYWxzZSwiaW5jb25zaXN0ZW5jaWVzIjpmYWxzZSwiaXNDaHJvbWVGb3JUZXN0aW5nIjpmYWxzZSwibWlzc2luZ1dlYlJUQyI6ZmFsc2UsImRldGVjdENTU0Fub21hbGllcyI6ZmFsc2UsImlzSGVhZGxlc3NQZXJtaXNzaW9uTWF0Y2hlZCI6ZmFsc2UsInN1c1VzZXJJbnB1dCI6ZmFsc2V9fQ==","sentTimestamp":1790537822544}

19:37:02.733 POST 200 fetch 1.2 KB 505 ms —

19:37:03.234 POST No response fetch 0 B 0 ms —

19:37:03.349 GET 200 script 51 B 473 ms 1 alerts

19:37:03.637 GET 200 xhr 17.5 KB 1457 ms 1 alerts

19:37:05.107 GET 200 xhr 453.7 KB 644 ms 1 alerts

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bufsao.com/e/CdCBfdIQnyzvb

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Network requests