RU EN
www.
Technical audit · 2026-05-29

findresultshub.com

DNS Monetization Parking Page
DE

A DNS monetization parking page. 14 requests, 7 domains. Intercepts traffic aimed at grundbuch-online.de — a German real estate registry service. A Yahoo/Verizon DNS platform with fingerprinting. Microsoft Clarity without consent. No privacy policy found. gdpr=1 is transmitted as a parameter, yet there is no banner.

Timeline of the leak

+0 ms · interception page
findresultshub.com/?dn=grundbuch-online.de — a Verizon Media/Yahoo DNS parking page. The dn= parameter identifies the original domain whose traffic was intercepted. openresty, via: 1.1 google.
+389 ms · Verizon DNS fingerprint
l.cdn-fileserver.com/bping.php — session initialization: visitor ID, session ID, geo-coordinates (45.47|9.19, Milan), cc=IT, IP hash wsip, screen resolution, network type 4g, gdpr=1.
+422 ms · SAFEFRAME ad iframe
resultsfinderhub.com/sr/754870121/SAFEFRAME.html — a Yahoo SAFEFRAME advertising container. An isolated iframe for displaying ads.
+742 ms · Microsoft Clarity + Bing Ads
scripts.clarity.ms/0.8.54/clarity.js — Microsoft Clarity (session recordings, heatmaps). msadsscale.microsoft.com/bingads/telemetryJS.js — Bing Ads telemetry.
+743 ms · Yahoo selectTier
s.yimg.com/ds/scripts/selectTier-p1.1.0.js — a script for selecting the advertising tier in the Yahoo auction.
+944 ms · bql.php — full fingerprint
l.cdn-fileserver.com/bql.php — transmits fp (a fingerprint hash), cme (an encrypted session token), geo=45.47|9.19, vgd_scr_h=864, vgd_scr_w=1536, auction keywords (Property Records Search), kid[], kwt[], and bid parameters.
+1937 ms · bqi.php — advertising analytics
Two requests to bqi.php — ad-impression reports carrying crid (creative ID), prid (publisher ID), pid (placement ID) parameters.

Declared versus actual

+ Verizon Media / Yahoo DNS (l.cdn-fileserver.com, s.cdn-fileserver.com) — no policy found — не заявлен
+ Microsoft Clarity (scripts.clarity.ms) — no policy found — не заявлен
+ Bing Ads (msadsscale.microsoft.com) — no policy found — не заявлен
+ Yahoo CDN (s.yimg.com) — no policy found — не заявлен

Transfer timings

+389 ms l.cdn-fileserver.com

Verizon Media / Yahoo DNS. Fingerprint, geo, visitor ID. GDPR zone (gdpr=1).

+742 ms scripts.clarity.ms

Microsoft Clarity. Session recordings. No banner.

+742 ms msadsscale.microsoft.com

Bing Ads telemetry. No banner.

Detected trackers

Indicators of GDPR non-compliance

Context

findresultshub.com is a parking page belonging to the Verizon Media/Yahoo DNS monetization system. It intercepts browser traffic directed at grundbuch-online.de — a German online real estate registry service (Grundbuch). Visitors typing in the address of the property registry land instead on an advertising page with a search form. openresty, Google Cloud CDN.

DNS parking monetization — the mechanism

The ?dn=grundbuch-online.de parameter identifies the original domain. The Verizon Media/Yahoo DNS platform (formerly Yodel/Oversee) generates contextual advertisements based on keywords associated with the original domain — in this case, “Property Records Search.” The ad auction is served via resultsfinderhub.com/sr/SAFEFRAME.html, with bid parameters carrying cid=8CUF3S44R, prid=8PR11258V, crid=505678630.

bping.php (+389 ms) collects a full device profile: a visitor ID (vi=1780088106960407558), a session ID (hvsid), city-level geo-coordinates (geo=45.47|9.19, Milan), a country code, an IP hash, a screen resolution of 1536×864, and network type 4g. The gdpr=1 parameter is present in the request — the platform is aware the visitor is in a GDPR zone, yet no consent banner is displayed.

bql.php (+944 ms) additionally transmits a 76-character fingerprint hash (fp) and an encrypted session token (cme). Microsoft Clarity (clarity.js) records the user’s full session, including mouse movements and clicks.

No privacy policy found

findresultshub.com contains no link to a privacy policy. GDPR Art. 13 requires that information about the controller, purposes, and legal bases for processing be provided at the moment data is collected. For users searching for grundbuch-online.de — Germany’s state real estate registry — landing on an advertising page with undeclared fingerprinting creates a particular risk: the user’s intent points to a possible property interest.

Conclusion

findresultshub.com shows a systemic pattern of GDPR non-compliance: fingerprinting without consent, Microsoft Clarity with no banner, and no privacy policy at all. The platform exploits navigation traffic intended for a German real estate registry service.

Evidence
Original (audit)
HAR file: de/findresultshub-com-2026-05-29.har
SHA-256: 87f9b4202f784d6dd1f41e9de39cd799a0069c3f96d40b0c6611056c19b850f5
Re-check snapshot
Awaiting changes
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.
IMPORTANT: before filing a complaint with the regulator, first contact the company directly and give it 30 days to respond. Without this step the regulator may reject the complaint. Details and a template letter to the company are in the Methodology.
Ready-to-send complaint letter

Where to file: Federal Commissioner for Data Protection (BfDI) — file a complaint online →

To: Federal Commissioner for Data Protection (BfDI)
From: [Your name], [contact email]

1. Subject of the complaint
I am filing a complaint regarding the processing of my personal data by the website findresultshub.com.

2. Circumstances
I visited the website findresultshub.com and found indications that the processing of my personal data does not comply with the GDPR. The technical analysis published on gdpru.eu on 29 May 2026 (open methodology, reproducible measurements) documents the following indications:

1) l.cdn-fileserver.com/bping.php (+389 ms) transmits fingerprint data about the visitor to the Verizon Media/Yahoo DNS platform with no consent banner: vi=1780088106960407558 (visitor ID), hvsid (session ID), geo=45.47|9.19 (Milan coordinates), cc=IT (country), wsip=170762276 (IP hash), a screen resolution of 1536x864, network type 4g, and a gdpr=1 parameter (a GDPR-zone flag). Further requests to bql.php and bqi.php transmit fp (a fingerprint hash), cme (an encrypted session token), and a full set of advertising parameters. Consent was never requested.

2) Microsoft Clarity (scripts.clarity.ms/0.8.54/clarity.js, +742 ms) and Bing Ads telemetry (msadsscale.microsoft.com/bingads/telemetryJS.js, +742 ms) load with no consent banner. Microsoft Clarity records full user sessions, including mouse movements, clicks, and scrolling. There is no consent banner.

3) No public privacy policy was found on findresultshub.com. The page intercepts traffic aimed at /?dn=grundbuch-online.de (a German real estate registry service) and monetizes it without informing users of the controller, the purposes of data processing, or their rights under GDPR Art. 13.

Full technical documentation is published at: https://gdpru.eu/en/audits/de-findresultshub-com-de/

3. Provisions violated
GDPR Art. 5(1)(a); TDDDG § 25(1); GDPR Art. 5(1)(a); TDDDG § 25(1); GDPR Art. 13

4. Request
I request that you investigate the violations described and apply the measures provided for in Article 58(2) GDPR.

5. Attachments
The full evidence base — the HAR file, its SHA-256 checksum and the quotation from the site's privacy policy documenting the stated contradiction — is published and verifiable at the link in point 2 above.

[Date]                                    [Signature / name]