urlquery.net
WEBSITE ANALYSIS REPORT

http://buffstream.io/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B183 ms2 alerts
GET301document0 B88 ms2 alerts
GET200document37.3 KB53 ms2 alerts
GET200script256 B18 ms2 alerts
GET200img64.0 KB209 ms1 alerts
GET301img0 B165 ms—
GET200script164.0 KB47 ms2 alerts
GET200img3.7 KB18 ms2 alerts
GET200img13.8 KB86 ms2 alerts
GET200img2.0 KB32 ms2 alerts
GET200img9.4 KB75 ms2 alerts
GET200img2.5 KB66 ms2 alerts
GET200img8.9 KB71 ms2 alerts
GET200img21.0 KB23 ms2 alerts
GET200img17.5 KB74 ms2 alerts
GET200img20.9 KB41 ms2 alerts
GET200img8.2 KB59 ms2 alerts
GET200img8.1 KB62 ms2 alerts
GET200img9.4 KB67 ms2 alerts
GET200img9.4 KB74 ms2 alerts
GET200img8.3 KB78 ms2 alerts
GET200img13.9 KB75 ms2 alerts
GET200img1.2 KB81 ms2 alerts
GET200img3.1 KB97 ms2 alerts
GET200img6.0 KB88 ms2 alerts
GET200img3.1 KB98 ms2 alerts
GET200img3.1 KB92 ms2 alerts
GET200img3.1 KB97 ms2 alerts
GET200img7.8 KB101 ms2 alerts
GET200img7.2 KB107 ms2 alerts

Transaction #34

Request / response

URL

GET HTTPS
https://ms.buffstream.io/ncaab-logo/2-duke.png

IP / ASN

The Netherlands 31.220.0.104

AS206264 · Amarutu Technology Ltd

Requested by
https://ms.buffstream.io/index-version-27

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
DigiCert UltraDNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /ncaab-logo/2-duke.png HTTP/1.1
Host: ms.buffstream.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Referer: https://ms.buffstream.io/index-version-27
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 27 Jul 2026 05:07:00 GMT
Content-Type: image/png
Content-Length: 7322
Last-Modified: Sat, 08 Mar 2025 09:54:05 GMT
Connection: keep-alive
ETag: "67cc13bd-1c9a"
Accept-Ranges: bytes

GET200img7.2 KB108 ms2 alerts
GET200img7.2 KB118 ms2 alerts
GET200img7.2 KB118 ms2 alerts
GET200img11.6 KB116 ms2 alerts
GET200img11.6 KB120 ms2 alerts
GET200img11.6 KB126 ms2 alerts
GET200img11.6 KB125 ms2 alerts
GET200img1006 B122 ms2 alerts
GET200script67.6 KB14 ms2 alerts
GET301img0 B167 ms—
GET200img5.3 KB19 ms2 alerts
POST204beacon0 B161 ms3 alerts
GET200fetch952 B236 ms3 alerts
GET200img40.8 KB43 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot