RU EN
www.
Technical audit · 29.05.2026

findresultshub.com

DNS Monetization Parking Page
DE

A DNS monetization parking page. 14 requests, 7 domains. Intercepts traffic aimed at grundbuch-online.de — a German real estate registry service. A Yahoo/Verizon DNS platform with fingerprinting. Microsoft Clarity without consent. No privacy policy found. gdpr=1 is transmitted as a parameter, yet there is no banner.

Request timeline

+0 ms · interception page
findresultshub.com/?dn=grundbuch-online.de — a Verizon Media/Yahoo DNS parking page. The dn= parameter identifies the original domain whose traffic was intercepted. openresty, via: 1.1 google.
+389 ms · Verizon DNS fingerprint
l.cdn-fileserver.com/bping.php — session initialization: visitor ID, session ID, geo-coordinates (45.47|9.19, Milan), cc=IT, IP hash wsip, screen resolution, network type 4g, gdpr=1.
+422 ms · SAFEFRAME ad iframe
resultsfinderhub.com/sr/754870121/SAFEFRAME.html — a Yahoo SAFEFRAME advertising container. An isolated iframe for displaying ads.
+742 ms · Microsoft Clarity + Bing Ads
scripts.clarity.ms/0.8.54/clarity.js — Microsoft Clarity (session recordings, heatmaps). msadsscale.microsoft.com/bingads/telemetryJS.js — Bing Ads telemetry.
+743 ms · Yahoo selectTier
s.yimg.com/ds/scripts/selectTier-p1.1.0.js — a script for selecting the advertising tier in the Yahoo auction.
+944 ms · bql.php — full fingerprint
l.cdn-fileserver.com/bql.php — transmits fp (a fingerprint hash), cme (an encrypted session token), geo=45.47|9.19, vgd_scr_h=864, vgd_scr_w=1536, auction keywords (Property Records Search), kid[], kwt[], and bid parameters.
+1937 ms · bqi.php — advertising analytics
Two requests to bqi.php — ad-impression reports carrying crid (creative ID), prid (publisher ID), pid (placement ID) parameters.

Declared versus actual

+ Verizon Media / Yahoo DNS (l.cdn-fileserver.com, s.cdn-fileserver.com) — no policy found — not declared
+ Microsoft Clarity (scripts.clarity.ms) — no policy found — not declared
+ Bing Ads (msadsscale.microsoft.com) — no policy found — not declared
+ Yahoo CDN (s.yimg.com) — no policy found — not declared

Transfer timings

+389 ms l.cdn-fileserver.com

Verizon Media / Yahoo DNS. Fingerprint, geo, visitor ID. GDPR zone (gdpr=1).

+742 ms scripts.clarity.ms

Microsoft Clarity. Session recordings. No banner.

+742 ms msadsscale.microsoft.com

Bing Ads telemetry. No banner.

Detected trackers

Indicators of GDPR non-compliance

Context

findresultshub.com is a parking page belonging to the Verizon Media/Yahoo DNS monetization system. It intercepts browser traffic directed at grundbuch-online.de — a German online real estate registry service (Grundbuch). Visitors typing in the address of the property registry land instead on an advertising page with a search form. openresty, Google Cloud CDN.

DNS parking monetization — the mechanism

The ?dn=grundbuch-online.de parameter identifies the original domain. The Verizon Media/Yahoo DNS platform (formerly Yodel/Oversee) generates contextual advertisements based on keywords associated with the original domain — in this case, “Property Records Search.” The ad auction is served via resultsfinderhub.com/sr/SAFEFRAME.html, with bid parameters carrying cid=8CUF3S44R, prid=8PR11258V, crid=505678630.

bping.php (+389 ms) collects a full device profile: a visitor ID (vi=1780088106960407558), a session ID (hvsid), city-level geo-coordinates (geo=45.47|9.19, Milan), a country code, an IP hash, a screen resolution of 1536×864, and network type 4g. The gdpr=1 parameter is present in the request — the platform is aware the visitor is in a GDPR zone, yet no consent banner is displayed.

bql.php (+944 ms) additionally transmits a 76-character fingerprint hash (fp) and an encrypted session token (cme). Microsoft Clarity (clarity.js) records the user’s full session, including mouse movements and clicks.

No privacy policy found

findresultshub.com contains no link to a privacy policy. GDPR Art. 13 requires that information about the controller, purposes, and legal bases for processing be provided at the moment data is collected. For users searching for grundbuch-online.de — Germany’s state real estate registry — landing on an advertising page with undeclared fingerprinting creates a particular risk: the user’s intent points to a possible property interest.

Conclusion

findresultshub.com shows a systemic pattern of GDPR non-compliance: fingerprinting without consent, Microsoft Clarity with no banner, and no privacy policy at all. The platform exploits navigation traffic intended for a German real estate registry service.

Evidence

How to verify: download the file and compute its checksum — sha256sum file.har (Linux, macOS) or certutil -hashfile file.har SHA256 (Windows); it must match the one shown. The conclusions apply to the scope of this measurement — see the limitations of the method.

Original (audit)
HAR file: de/findresultshub-com-2026-05-29.har
SHA-256: 87f9b4202f784d6dd1f41e9de39cd799a0069c3f96d40b0c6611056c19b850f5
Re-check snapshot
Awaiting changes
HAR files are stored on EU infrastructure (Proton Drive). SHA-256 is published for integrity verification.
Want a response from the company about this audit? → Open the tool

Fill in once — it will be inserted into every letter below:

All fields are required to print the document — this is a formal requirement of the letter itself (the particulars of an official submission), not data collection: nothing is sent or saved anywhere, it all stays in your browser and disappears when you close the page. See the methodology for details.

Step 1. Data access request (GDPR Art. 15)

Send this letter directly to the company first — before contacting the regulator it has the right to respond (GDPR Art. 12(3) — 30 days).

Subject: Data access request (GDPR Art. 15) — findresultshub.com

To: [insert the company's address — DPO / support / legal department]
From: [Your name], [contact email]

I request access to my personal data processed in connection with the website findresultshub.com.

1. Categories of data and purposes of processing (Art. 15(1)(a)-(c))
Based on an independent technical analysis of the site, I request confirmation and detailed disclosure of the following categories of processing:

1) l.cdn-fileserver.com/bping.php (+389 ms) transmits fingerprint data about the visitor to the Verizon Media/Yahoo DNS platform with no consent banner: vi=1780088106960407558 (visitor ID), hvsid (session ID), geo=45.47|9.19 (Milan coordinates), cc=IT (country), wsip=170762276 (IP hash), a screen resolution of 1536x864, network type 4g, and a gdpr=1 parameter (a GDPR-zone flag). Further requests to bql.php and bqi.php transmit fp (a fingerprint hash), cme (an encrypted session token), and a full set of advertising parameters. Consent was never requested.

2) Microsoft Clarity (scripts.clarity.ms/0.8.54/clarity.js, +742 ms) and Bing Ads telemetry (msadsscale.microsoft.com/bingads/telemetryJS.js, +742 ms) load with no consent banner. Microsoft Clarity records full user sessions, including mouse movements, clicks, and scrolling. There is no consent banner.

3) No public privacy policy was found on findresultshub.com. The page intercepts traffic aimed at /?dn=grundbuch-online.de (a German real estate registry service) and monetizes it without informing users of the controller, the purposes of data processing, or their rights under GDPR Art. 13.


2. Recipients, retention periods, and transfers outside the EEA (Art. 15(1)(c)-(d), 46)
I also request the full list of third-party recipients, the applicable retention period for each category, and the legal basis for any transfer of data outside the EEA. The full technical audit with evidence (saved network log, SHA-256 checksum) is published at: https://gdpru.eu/en/audits/de-findresultshub-com-de/

3. Automated processing and profiling (Art. 15(1)(h))
Please state whether I am subject to automated decision-making or profiling, and if so, disclose the logic involved.

Sincerely,

[Your name]
[contact email]
[Country]


[Date]
IMPORTANT: before filing a complaint with the regulator, first contact the company directly and give it 30 days to respond. Without this step the regulator may reject the complaint. Details and a template letter to the company are in the Methodology.
Ready-to-send complaint letter

Where to file: Federal Commissioner for Data Protection (BfDI) — file a complaint online →

The regulator reviews complaints in its national language. There is an officially translated template from the European Data Protection Board (EDPB) — you can use it instead of or alongside this letter: Official EDPB complaint form (PDF, your language)

Subject: Complaint regarding personal data processing — findresultshub.com

1. Subject of the complaint
I am filing a complaint regarding the processing of my personal data by the website findresultshub.com.

2. Circumstances
I visited the website findresultshub.com and found indications that the processing of my personal data does not comply with the GDPR. The technical analysis published on gdpru.eu on 29 May 2026 (open methodology, reproducible measurements) documents the following indications:

1) l.cdn-fileserver.com/bping.php (+389 ms) transmits fingerprint data about the visitor to the Verizon Media/Yahoo DNS platform with no consent banner: vi=1780088106960407558 (visitor ID), hvsid (session ID), geo=45.47|9.19 (Milan coordinates), cc=IT (country), wsip=170762276 (IP hash), a screen resolution of 1536x864, network type 4g, and a gdpr=1 parameter (a GDPR-zone flag). Further requests to bql.php and bqi.php transmit fp (a fingerprint hash), cme (an encrypted session token), and a full set of advertising parameters. Consent was never requested.

2) Microsoft Clarity (scripts.clarity.ms/0.8.54/clarity.js, +742 ms) and Bing Ads telemetry (msadsscale.microsoft.com/bingads/telemetryJS.js, +742 ms) load with no consent banner. Microsoft Clarity records full user sessions, including mouse movements, clicks, and scrolling. There is no consent banner.

3) No public privacy policy was found on findresultshub.com. The page intercepts traffic aimed at /?dn=grundbuch-online.de (a German real estate registry service) and monetizes it without informing users of the controller, the purposes of data processing, or their rights under GDPR Art. 13.

Full technical documentation is published at: https://gdpru.eu/en/audits/de-findresultshub-com-de/

3. GDPR provisions I ask you to examine
GDPR Art. 5(1)(a); TDDDG § 25(1); GDPR Art. 5(1)(a); TDDDG § 25(1); GDPR Art. 13

4. Request
I request that you examine the circumstances described and, if non-compliance is confirmed, apply the measures provided for in Article 58(2) GDPR.

5. Attachments
The full evidence base — the HAR file, its SHA-256 checksum and the quotation from the site's privacy policy documenting the stated contradiction — is published and verifiable at the link in point 2 above.

Sincerely,

[Your name]
[contact email]
[Country]


[Date]