WEBSITE ANALYSIS REPORT

http://bufsao.com/e/CdCBfdIQnyzvb

27 Sep 2026 · 19:37:41.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
adsco.re3 captured requests
bufsao.com6 captured requests
c.adsco.re1 captured requests
cdn.tsyndicate.com1 captured requests
cdnjs.cloudflare.com3 captured requests
displayvertising.com1 captured requests
driverhugoverblown.com6 captured requests
jgrax7gpcc2g.l4.adsco.re1 captured requests
jgrax7gpcc2g.n4.adsco.re1 captured requests
jgrax7gpcc2g.s4.adsco.re1 captured requests
jssdk.tsyndicate.com1 captured requests
m696yefd.s1q2105.com1 captured requests
s7-t25.97bf1.com3 captured requests
ssl.p.jwpcdn.com5 captured requests
usrpubtrk.com1 captured requests
ut.odylismnumina.com1 captured requests
www.displayvertising.com1 captured requests

Connections

bufsao.com → 4.adsco.reCalls2 captured connections
bufsao.com → 6.adsco.reCalls2 captured connections
bufsao.com → acscdn.comLoads from3 captured connections
bufsao.com → adexchangerapid.comCalls1 captured connections
bufsao.com → adsco.reCalls3 captured connections
bufsao.com → c.adsco.reLoads from1 captured connections
bufsao.com → cdn.tsyndicate.comLoads from1 captured connections
bufsao.com → cdnjs.cloudflare.comLoads from3 captured connections
bufsao.com → displayvertising.comLoads from1 captured connections
bufsao.com → driverhugoverblown.comCalls2 captured connections
bufsao.com → driverhugoverblown.comEmbeds1 captured connections
bufsao.com → driverhugoverblown.comLoads from3 captured connections
bufsao.com → jgrax7gpcc2g.l4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.n4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.s4.adsco.reCalls1 captured connections
bufsao.com → jssdk.tsyndicate.comLoads from1 captured connections
bufsao.com → m696yefd.s1q2105.comLoads from1 captured connections
bufsao.com → s7-t25.97bf1.comCalls3 captured connections
bufsao.com → ssl.p.jwpcdn.comLoads from5 captured connections
bufsao.com → usrpubtrk.comCalls1 captured connections
bufsao.com → ut.odylismnumina.comLoads from1 captured connections
bufsao.com → www.displayvertising.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:37:00.455 GET 200 document 40.2 KB 403 ms —

19:37:01.059 GET 200 script 145.1 KB 68 ms —

19:37:01.061 GET 200 stylesheet 48.2 KB 27 ms —

19:37:01.062 GET 200 script 164.9 KB 49 ms 1 alerts

19:37:01.065 GET 200 script 84.9 KB 39 ms —

19:37:01.066 GET 200 script 45.8 KB 39 ms —

19:37:01.072 GET 200 script 59.4 KB 36 ms —

19:37:01.074 GET 200 script 72.0 KB 59 ms —

19:37:01.077 GET 200 script 5 B 87 ms 1 alerts

19:37:01.079 GET 200 script 29.8 KB 76 ms —

19:37:01.083 GET 200 script 3.7 KB 27 ms —

19:37:01.085 GET 200 script 928 B 27 ms —

19:37:01.261 GET 200 script 76.5 KB 15 ms —

19:37:01.265 POST 200 fetch 469 B 179 ms —

19:37:01.329 GET 200 script 164.9 KB 24 ms 1 alerts

19:37:01.452 GET 200 script 66.2 KB 17 ms 1 alerts

19:37:01.453 GET 200 script 41.0 KB 42 ms 1 alerts

19:37:01.455 GET 200 script 2 B 69 ms —

19:37:01.526 GET 200 subdocument 957 B 17 ms —

19:37:01.543 GET 200 img 74.7 KB 137 ms —

19:37:01.586 GET 200 script 69.8 KB 15 ms —

19:37:01.589 GET 200 script 321.8 KB 23 ms —

19:37:01.592 GET 200 script 450.6 KB 27 ms —

19:37:01.680 GET 200 script 1.4 KB 18 ms —

19:37:01.682 POST 200 beacon 43 B 19 ms —

19:37:01.691 GET 200 script 96.0 KB 23 ms —

19:37:01.757 GET 200 script 70.2 KB 22 ms —

19:37:01.797 GET 200 xhr 174 B 1821 ms 1 alerts

19:37:01.799 GET 200 img 5.1 KB 674 ms —

19:37:01.882 POST 204 beacon 0 B 135 ms —

19:37:01.887 POST 204 beacon 0 B 446 ms —

19:37:01.889 POST 204 beacon 0 B 883 ms —

19:37:02.446 POST 200 beacon 43 B 18 ms —

19:37:02.516 GET 200 fetch 0 B 467 ms —

19:37:02.521 GET No response fetch 0 B 0 ms —

19:37:02.523 GET No response fetch 0 B 0 ms —

19:37:02.525 GET 200 fetch 45 B 34 ms —

19:37:02.532 GET 200 fetch 45 B 30 ms —

19:37:02.548 GET 200 fetch 952 B 785 ms 3 alerts

19:37:02.551 POST 204 beacon 0 B 211 ms 3 alerts

19:37:02.733 POST 200 fetch 1.2 KB 505 ms —

19:37:03.234 POST No response fetch 0 B 0 ms —

19:37:03.349 GET 200 script 51 B 473 ms 1 alerts

Transaction #33

Request / response

URL

GET HTTPS

https://displayvertising.com/jycmwcngovjglu?pXhvdkin=BQOCAAAAAAAACZUAAj1c6LhnADwr8MmsvGW3cztg6J1M9QPVREDgxSoKWPK-igBg5wyZcMCX9wnm4RA0sFTu28JHL5Df72tphF9TFKDX5sEJrmYX5WU2b4418kOKZd7n97ET6GzX6PVg7T4T4i9A3SFVsCjRqkAYNJXfAfGkv_hE-ppmE_pgoqEeAOyJOoS8IcNWWdNM9thIuXVQYyR80xLDhEHn0-ipbIqubZkiSRsPvga9g4Yyc6Y1MpC1qSoFbY10A0JfuRJolKmtSsTXfPWeVnBcekIWKvQZg4ozpvPBxBqgYrkBSwnRPkXJlbmkGy476LTjbVc-FBRur2EFv8y-9yDRuDYp9d8TFd7NjEuivdexQdYKDScdPMVTajmgdkKLEwOAr4hazh065HUseYG-cz51fU3uaO2iJcsteST2Jo231B9TV1wBtCoWfnm7dkyY6e7s3DDtOBd0GfNnDy7IsGW4DMlehSRm7qJy3RCzJ3kdgs63lb75IT_3FNoCXviak0E9mBQFn_qNYWVoaoXptduK3uwnMLXjK_-UJswc1JApmlmsbXnoH6UfceBK0-AEozjwXgNN7ZFKaw7tj8x3_B2GouXZpRAksbnAzZuqPuVoEOHDs1tadtJt_xX5joYsz9OcOStS0GRTinvhFPMKrw7BZSqZwhFVO-Ruza30wAtrh923CFXzzdVW9AXluh2O8FnLfGEHpMqQeL4hcAxkshv7MH2dubGPXOl1SzOueX6N7WaGatkWQRjnGp3YmF3NyQdneyjKsOI8-vqzgq7S2MRNuuAzyCN0d37TtzUdHQMipIvHUYY8GaYlfzEQx3yjnRe_IN9Mwt0iaxawnU4UTHGT6O5Jo0sV7KBTdFt1WmK5RPYDh6yLSMWLjY9eEA7hfDgJYzENyH-GcNPmYKzmipbk8IHsgZdzJdtqhc5hT5SX5mW1tTkfVZ_cMfxX2-GLy9IcSdnF-755xIN7OVSwrJcbKzEqAPMAAQBQ0WDh45oF4XpDYmN3ESlPtGfU3mfyf2Q6eU61aKhZNFDnlHCSVLsi3P0g0ClTVcL0m8BwbLTF3GWpS4iqBlfKEwlawsOQkAhZWT2_kJrzPazdmVaBsthLKdJ8rTo_hV60jzPCiYUZ0kuiZA13yrOHRFORdo48FJwYBzVfpa76ahxA9BxeHkTZQ85eZonn-Mz8LFuXIeBveSUsiTSsv2Oq&EFGAxHXu=4&sOplCEQi=5270867&IQqYxFeR=&TbDZCXxi=0,0&bnRSzJcW=&DbKdSRCm=&dSQmVLIB=1280,1024,1,1280,1024,0

IP / ASN

216.59.56.9

AS53334 · TUT-AS

Requested by: https://bufsao.com/e/CdCBfdIQnyzvb

Resource information

File type: ASCII text, with no line terminators
MIME type: application/javascript
First seen (UTC): 27 Sep 2026 · 19:38:07.143 UTC
Last seen (UTC): 27 Sep 2026 · 19:38:07.143 UTC
Times seen: 1

Size: 51 B (51 bytes)
MD5: e349d07925b2757100a7c1518e6db557
SHA1: 4a795305030a1b11003bc125461cd16267b683a3
SHA256: 83b47c310981146760f4111811c3cd14bb3e7ee9eea1bc518730359d5957a3f8

Certificate information

Issuer: Sectigo Limited · Sectigo Public Server Authentication CA DV R36
Subject: displayvertising.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint: F4:93:5A:63:37:D7:5A:AE:1D:7F:C4:E4:8D:0C:2F:50:85:18:A4:0D
Valid from: Sat, 02 May 2026 00:00:00 GMT
Valid until: Mon, 16 Nov 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /jycmwcngovjglu?pXhvdkin=BQOCAAAAAAAACZUAAj1c6LhnADwr8MmsvGW3cztg6J1M9QPVREDgxSoKWPK-igBg5wyZcMCX9wnm4RA0sFTu28JHL5Df72tphF9TFKDX5sEJrmYX5WU2b4418kOKZd7n97ET6GzX6PVg7T4T4i9A3SFVsCjRqkAYNJXfAfGkv_hE-ppmE_pgoqEeAOyJOoS8IcNWWdNM9thIuXVQYyR80xLDhEHn0-ipbIqubZkiSRsPvga9g4Yyc6Y1MpC1qSoFbY10A0JfuRJolKmtSsTXfPWeVnBcekIWKvQZg4ozpvPBxBqgYrkBSwnRPkXJlbmkGy476LTjbVc-FBRur2EFv8y-9yDRuDYp9d8TFd7NjEuivdexQdYKDScdPMVTajmgdkKLEwOAr4hazh065HUseYG-cz51fU3uaO2iJcsteST2Jo231B9TV1wBtCoWfnm7dkyY6e7s3DDtOBd0GfNnDy7IsGW4DMlehSRm7qJy3RCzJ3kdgs63lb75IT_3FNoCXviak0E9mBQFn_qNYWVoaoXptduK3uwnMLXjK_-UJswc1JApmlmsbXnoH6UfceBK0-AEozjwXgNN7ZFKaw7tj8x3_B2GouXZpRAksbnAzZuqPuVoEOHDs1tadtJt_xX5joYsz9OcOStS0GRTinvhFPMKrw7BZSqZwhFVO-Ruza30wAtrh923CFXzzdVW9AXluh2O8FnLfGEHpMqQeL4hcAxkshv7MH2dubGPXOl1SzOueX6N7WaGatkWQRjnGp3YmF3NyQdneyjKsOI8-vqzgq7S2MRNuuAzyCN0d37TtzUdHQMipIvHUYY8GaYlfzEQx3yjnRe_IN9Mwt0iaxawnU4UTHGT6O5Jo0sV7KBTdFt1WmK5RPYDh6yLSMWLjY9eEA7hfDgJYzENyH-GcNPmYKzmipbk8IHsgZdzJdtqhc5hT5SX5mW1tTkfVZ_cMfxX2-GLy9IcSdnF-755xIN7OVSwrJcbKzEqAPMAAQBQ0WDh45oF4XpDYmN3ESlPtGfU3mfyf2Q6eU61aKhZNFDnlHCSVLsi3P0g0ClTVcL0m8BwbLTF3GWpS4iqBlfKEwlawsOQkAhZWT2_kJrzPazdmVaBsthLKdJ8rTo_hV60jzPCiYUZ0kuiZA13yrOHRFORdo48FJwYBzVfpa76ahxA9BxeHkTZQ85eZonn-Mz8LFuXIeBveSUsiTSsv2Oq&EFGAxHXu=4&sOplCEQi=5270867&IQqYxFeR=&TbDZCXxi=0,0&bnRSzJcW=&DbKdSRCm=&dSQmVLIB=1280,1024,1,1280,1024,0 HTTP/1.1
Host: displayvertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://bufsao.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 27 Sep 2026 19:37:03 GMT
content-type: application/javascript
cache-control: private, no-store, no-cache, no-transform
x-popads-ec: BotDetectedException-2-147
X-Firefox-Spdy: h2

19:37:03.637 GET 200 xhr 17.5 KB 1457 ms 1 alerts

19:37:05.107 GET 200 xhr 453.7 KB 644 ms 1 alerts

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Hostnames

Connections

Network requests

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bufsao.com/e/CdCBfdIQnyzvb

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Network requests