WEBSITE ANALYSIS REPORT

http://bufsao.com/e/CdCBfdIQnyzvb

27 Sep 2026 · 19:37:41.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
adsco.re3 captured requests
bufsao.com6 captured requests
c.adsco.re1 captured requests
cdn.tsyndicate.com1 captured requests
cdnjs.cloudflare.com3 captured requests
displayvertising.com1 captured requests
driverhugoverblown.com6 captured requests
jgrax7gpcc2g.l4.adsco.re1 captured requests
jgrax7gpcc2g.n4.adsco.re1 captured requests
jgrax7gpcc2g.s4.adsco.re1 captured requests
jssdk.tsyndicate.com1 captured requests
m696yefd.s1q2105.com1 captured requests
s7-t25.97bf1.com3 captured requests
ssl.p.jwpcdn.com5 captured requests
usrpubtrk.com1 captured requests
ut.odylismnumina.com1 captured requests
www.displayvertising.com1 captured requests

Connections

bufsao.com → 4.adsco.reCalls2 captured connections
bufsao.com → 6.adsco.reCalls2 captured connections
bufsao.com → acscdn.comLoads from3 captured connections
bufsao.com → adexchangerapid.comCalls1 captured connections
bufsao.com → adsco.reCalls3 captured connections
bufsao.com → c.adsco.reLoads from1 captured connections
bufsao.com → cdn.tsyndicate.comLoads from1 captured connections
bufsao.com → cdnjs.cloudflare.comLoads from3 captured connections
bufsao.com → displayvertising.comLoads from1 captured connections
bufsao.com → driverhugoverblown.comCalls2 captured connections
bufsao.com → driverhugoverblown.comEmbeds1 captured connections
bufsao.com → driverhugoverblown.comLoads from3 captured connections
bufsao.com → jgrax7gpcc2g.l4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.n4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.s4.adsco.reCalls1 captured connections
bufsao.com → jssdk.tsyndicate.comLoads from1 captured connections
bufsao.com → m696yefd.s1q2105.comLoads from1 captured connections
bufsao.com → s7-t25.97bf1.comCalls3 captured connections
bufsao.com → ssl.p.jwpcdn.comLoads from5 captured connections
bufsao.com → usrpubtrk.comCalls1 captured connections
bufsao.com → ut.odylismnumina.comLoads from1 captured connections
bufsao.com → www.displayvertising.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:37:00.455 GET 200 document 40.2 KB 403 ms —

19:37:01.059 GET 200 script 145.1 KB 68 ms —

19:37:01.061 GET 200 stylesheet 48.2 KB 27 ms —

19:37:01.062 GET 200 script 164.9 KB 49 ms 1 alerts

19:37:01.065 GET 200 script 84.9 KB 39 ms —

19:37:01.066 GET 200 script 45.8 KB 39 ms —

19:37:01.072 GET 200 script 59.4 KB 36 ms —

19:37:01.074 GET 200 script 72.0 KB 59 ms —

19:37:01.077 GET 200 script 5 B 87 ms 1 alerts

Transaction #30

Request / response

URL

GET HTTPS

https://ut.odylismnumina.com/rOWMa1byrfxT/134585

IP / ASN

23.109.253.109

AS7979 · SERVERS-COM

Requested by: https://bufsao.com/e/CdCBfdIQnyzvb

Resource information

File type: ASCII text, with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 24 Apr 2025 · 10:17:49.831 UTC
Last seen (UTC): 21 Oct 2026 · 08:56:36.475 UTC
Times seen: 22060

Size: 5 B (5 bytes)
MD5: 848667c49f5d3aef59cd65ed276cd7ae
SHA1: bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763
SHA256: cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8

Certificate information

Issuer: Let's Encrypt · YR1
Subject: ut.odylismnumina.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 4E:7D:6D:32:9C:85:A6:D5:E8:94:97:EC:45:3D:EC:D3:B7:D1:48:FC
Valid from: Sat, 26 Sep 2026 16:12:16 GMT
Valid until: Fri, 25 Dec 2026 16:12:15 GMT

Technology fingerprints

HSTS (Security)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /rOWMa1byrfxT/134585 HTTP/1.1
Host: ut.odylismnumina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bufsao.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sun, 27 Sep 2026 19:37:01 GMT
content-type: application/javascript; charset=utf-8
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
access-control-allow-credentials: true
access-control-allow-origin: https://bufsao.com
access-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires
access-control-max-age: 600
access-control-allow-methods: GET, POST, OPTIONS
set-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 28-Sep-2026 19:37:01 GMT; Max-Age=86400; path=/; secure; SameSite=None
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

19:37:01.079 GET 200 script 29.8 KB 76 ms —

19:37:01.083 GET 200 script 3.7 KB 27 ms —

19:37:01.085 GET 200 script 928 B 27 ms —

19:37:01.261 GET 200 script 76.5 KB 15 ms —

19:37:01.265 POST 200 fetch 469 B 179 ms —

19:37:01.329 GET 200 script 164.9 KB 24 ms 1 alerts

19:37:01.452 GET 200 script 66.2 KB 17 ms 1 alerts

19:37:01.453 GET 200 script 41.0 KB 42 ms 1 alerts

19:37:01.455 GET 200 script 2 B 69 ms —

19:37:01.526 GET 200 subdocument 957 B 17 ms —

19:37:01.543 GET 200 img 74.7 KB 137 ms —

19:37:01.586 GET 200 script 69.8 KB 15 ms —

19:37:01.589 GET 200 script 321.8 KB 23 ms —

19:37:01.592 GET 200 script 450.6 KB 27 ms —

19:37:01.680 GET 200 script 1.4 KB 18 ms —

19:37:01.682 POST 200 beacon 43 B 19 ms —

19:37:01.691 GET 200 script 96.0 KB 23 ms —

19:37:01.757 GET 200 script 70.2 KB 22 ms —

19:37:01.797 GET 200 xhr 174 B 1821 ms 1 alerts

19:37:01.799 GET 200 img 5.1 KB 674 ms —

19:37:01.882 POST 204 beacon 0 B 135 ms —

19:37:01.887 POST 204 beacon 0 B 446 ms —

19:37:01.889 POST 204 beacon 0 B 883 ms —

19:37:02.446 POST 200 beacon 43 B 18 ms —

19:37:02.516 GET 200 fetch 0 B 467 ms —

19:37:02.521 GET No response fetch 0 B 0 ms —

19:37:02.523 GET No response fetch 0 B 0 ms —

19:37:02.525 GET 200 fetch 45 B 34 ms —

19:37:02.532 GET 200 fetch 45 B 30 ms —

19:37:02.548 GET 200 fetch 952 B 785 ms 3 alerts

19:37:02.551 POST 204 beacon 0 B 211 ms 3 alerts

19:37:02.733 POST 200 fetch 1.2 KB 505 ms —

19:37:03.234 POST No response fetch 0 B 0 ms —

19:37:03.349 GET 200 script 51 B 473 ms 1 alerts

19:37:03.637 GET 200 xhr 17.5 KB 1457 ms 1 alerts

19:37:05.107 GET 200 xhr 453.7 KB 644 ms 1 alerts

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Hostnames

Connections

Network requests

Transaction #30

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bufsao.com/e/CdCBfdIQnyzvb

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #30

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Network requests