WEBSITE ANALYSIS REPORT

http://bufsao.com/e/CdCBfdIQnyzvb

27 Sep 2026 · 19:37:41.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
adsco.re3 captured requests
bufsao.com6 captured requests
c.adsco.re1 captured requests
cdn.tsyndicate.com1 captured requests
cdnjs.cloudflare.com3 captured requests
displayvertising.com1 captured requests
driverhugoverblown.com6 captured requests
jgrax7gpcc2g.l4.adsco.re1 captured requests
jgrax7gpcc2g.n4.adsco.re1 captured requests
jgrax7gpcc2g.s4.adsco.re1 captured requests
jssdk.tsyndicate.com1 captured requests
m696yefd.s1q2105.com1 captured requests
s7-t25.97bf1.com3 captured requests
ssl.p.jwpcdn.com5 captured requests
usrpubtrk.com1 captured requests
ut.odylismnumina.com1 captured requests
www.displayvertising.com1 captured requests

Connections

bufsao.com → 4.adsco.reCalls2 captured connections
bufsao.com → 6.adsco.reCalls2 captured connections
bufsao.com → acscdn.comLoads from3 captured connections
bufsao.com → adexchangerapid.comCalls1 captured connections
bufsao.com → adsco.reCalls3 captured connections
bufsao.com → c.adsco.reLoads from1 captured connections
bufsao.com → cdn.tsyndicate.comLoads from1 captured connections
bufsao.com → cdnjs.cloudflare.comLoads from3 captured connections
bufsao.com → displayvertising.comLoads from1 captured connections
bufsao.com → driverhugoverblown.comCalls2 captured connections
bufsao.com → driverhugoverblown.comEmbeds1 captured connections
bufsao.com → driverhugoverblown.comLoads from3 captured connections
bufsao.com → jgrax7gpcc2g.l4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.n4.adsco.reCalls1 captured connections
bufsao.com → jgrax7gpcc2g.s4.adsco.reCalls1 captured connections
bufsao.com → jssdk.tsyndicate.comLoads from1 captured connections
bufsao.com → m696yefd.s1q2105.comLoads from1 captured connections
bufsao.com → s7-t25.97bf1.comCalls3 captured connections
bufsao.com → ssl.p.jwpcdn.comLoads from5 captured connections
bufsao.com → usrpubtrk.comCalls1 captured connections
bufsao.com → ut.odylismnumina.comLoads from1 captured connections
bufsao.com → www.displayvertising.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:37:00.455 GET 200 document 40.2 KB 403 ms —

19:37:01.059 GET 200 script 145.1 KB 68 ms —

19:37:01.061 GET 200 stylesheet 48.2 KB 27 ms —

19:37:01.062 GET 200 script 164.9 KB 49 ms 1 alerts

19:37:01.065 GET 200 script 84.9 KB 39 ms —

19:37:01.066 GET 200 script 45.8 KB 39 ms —

19:37:01.072 GET 200 script 59.4 KB 36 ms —

19:37:01.074 GET 200 script 72.0 KB 59 ms —

19:37:01.077 GET 200 script 5 B 87 ms 1 alerts

19:37:01.079 GET 200 script 29.8 KB 76 ms —

19:37:01.083 GET 200 script 3.7 KB 27 ms —

19:37:01.085 GET 200 script 928 B 27 ms —

19:37:01.261 GET 200 script 76.5 KB 15 ms —

19:37:01.265 POST 200 fetch 469 B 179 ms —

19:37:01.329 GET 200 script 164.9 KB 24 ms 1 alerts

Transaction #39

Request / response

URL

GET HTTPS

https://acscdn.com/script/aclib.js

IP / ASN

104.18.17.201

AS13335 · CLOUDFLARENET

Requested by: https://bufsao.com/e/CdCBfdIQnyzvb

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: text/javascript
First seen (UTC): 02 Sep 2026 · 15:02:08.202 UTC
Last seen (UTC): 13 Oct 2026 · 07:16:16.107 UTC
Times seen: 322

Size: 164.9 KB (168871 bytes)
MD5: 6620099ef0a9237fd1c25835a4d47473
SHA1: 06f155ac71a5f0e43d087ab1d1a678f06ffb23f8
SHA256: 0bac35168ee791e4ee2933ec767ef9342ad3a2744a74fb83d49c0c2f11defb04

Certificate information

Issuer: Google Trust Services · WE1
Subject: acscdn.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: F4:89:89:23:08:06:FB:30:83:0A:81:5E:A0:52:75:88:C1:87:D5:F5
Valid from: Sat, 29 Aug 2026 21:41:58 GMT
Valid until: Fri, 27 Nov 2026 22:41:50 GMT

Technology fingerprints

Cloudflare (CDN)
Google Cloud Storage (Miscellaneous)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/aclib.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bufsao.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sun, 27 Sep 2026 19:37:01 GMT
content-type: text/javascript
x-guploader-uploadid: AJjja9bkjvKwY1PI9EpxOACgFhURanlx4Sh4EqQTtyo6uB9wuJQ0KkqEFlwgZVqknYr3_DogeGrtg53QIGsSHA
x-goog-generation: 1788356879150222
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 168871
x-goog-hash: crc32c=wlvO9A==, md5=ZiAJnvCpI3/Rwlg1pNR0cw==
x-goog-storage-class: MULTI_REGIONAL
etag: W/"6620099ef0a9237fd1c25835a4d47473"
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: cloudflare
expires: Sun, 27 Sep 2026 20:37:01 GMT
cache-control: public, max-age=3600
last-modified: Wed, 02 Sep 2026 13:47:59 GMT
alt-svc: h3=":443"; ma=86400
priority: u=3,i=?0
age: 524
cf-cache-status: HIT
content-encoding: gzip
cf-ray: a41cf5e75d52c272-OSL
server-timing: cfExtPri

19:37:01.452 GET 200 script 66.2 KB 17 ms 1 alerts

19:37:01.453 GET 200 script 41.0 KB 42 ms 1 alerts

19:37:01.455 GET 200 script 2 B 69 ms —

19:37:01.526 GET 200 subdocument 957 B 17 ms —

19:37:01.543 GET 200 img 74.7 KB 137 ms —

19:37:01.586 GET 200 script 69.8 KB 15 ms —

19:37:01.589 GET 200 script 321.8 KB 23 ms —

19:37:01.592 GET 200 script 450.6 KB 27 ms —

19:37:01.680 GET 200 script 1.4 KB 18 ms —

19:37:01.682 POST 200 beacon 43 B 19 ms —

19:37:01.691 GET 200 script 96.0 KB 23 ms —

19:37:01.757 GET 200 script 70.2 KB 22 ms —

19:37:01.797 GET 200 xhr 174 B 1821 ms 1 alerts

19:37:01.799 GET 200 img 5.1 KB 674 ms —

19:37:01.882 POST 204 beacon 0 B 135 ms —

19:37:01.887 POST 204 beacon 0 B 446 ms —

19:37:01.889 POST 204 beacon 0 B 883 ms —

19:37:02.446 POST 200 beacon 43 B 18 ms —

19:37:02.516 GET 200 fetch 0 B 467 ms —

19:37:02.521 GET No response fetch 0 B 0 ms —

19:37:02.523 GET No response fetch 0 B 0 ms —

19:37:02.525 GET 200 fetch 45 B 34 ms —

19:37:02.532 GET 200 fetch 45 B 30 ms —

19:37:02.548 GET 200 fetch 952 B 785 ms 3 alerts

19:37:02.551 POST 204 beacon 0 B 211 ms 3 alerts

19:37:02.733 POST 200 fetch 1.2 KB 505 ms —

19:37:03.234 POST No response fetch 0 B 0 ms —

19:37:03.349 GET 200 script 51 B 473 ms 1 alerts

19:37:03.637 GET 200 xhr 17.5 KB 1457 ms 1 alerts

19:37:05.107 GET 200 xhr 453.7 KB 644 ms 1 alerts

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Hostnames

Connections

Network requests

Transaction #39

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bufsao.com/e/CdCBfdIQnyzvb

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #39

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bufsao.com/e/CdCBfdIQnyzvb

Domain graph

Network requests