Report - oulook.com/favicon.ico

Report Overview

Submitted URL
oulook.com/favicon.ico
IP
103.224.212.240
ASN
#133618 Trellian Pty. Limited
Submitted
2024-05-10 13:59:45
Access
public
Website Title
favicon.ico ( Image)
Final URL
ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
oulook.com	unknown	2009-07-18	2017-02-03	2023-10-25	1.4 kB	16 kB	103.224.212.240
ww16.oulook.com	unknown	2009-07-18	2022-01-25	2023-10-25	1.4 kB	292 B	91.195.240.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	oulook.com/favicon.ico	103.224.212.240		575 B
URL oulook.com/favicon.ico IP 103.224.212.240:0 ASN #133618 Trellian Pty. Limited File type HTML document, ASCII text Size 575 B (575 bytes) Hash d2d2ac6d6147ae0b5a467d7a1a53a5e2 7df99bbe3b4b022bf0a3ce9a24c4c5ba9bfff08c 29443bdb499ad98a936a9732002a7606c04e6b02e6302f6f767623e950f55442 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK date: Fri, 10 May 2024 13:59:21 GMT server: Apache set-cookie: __tad=1715349561.2025457; expires=Mon, 08-May-2034 13:59:21 GMT; Max-Age=315360000 vary: Accept-Encoding content-encoding: gzip content-length: 575 content-type: text/html; charset=UTF-8 connection: close`

	oulook.com/js/fingerprint/iife.min.js	103.224.212.240		14 kB
URL oulook.com/js/fingerprint/iife.min.js IP 103.224.212.240:0 ASN #133618 Trellian Pty. Limited File type JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators Size 14 kB (14345 bytes) Hash 63f9fd621d1fbd53b7c5856e58c11ccd a46973c2fbdbfeb159e0d717a90f88307e274012 c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089 HTTP Headers `GET /js/fingerprint/iife.min.js HTTP/1.1 Host: oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://oulook.com/favicon.ico Cookie: __tad=1715349561.2025457 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK date: Fri, 10 May 2024 13:59:21 GMT server: Apache last-modified: Mon, 20 Nov 2023 05:36:39 GMT etag: "85c0-60a8edebfa7c0-gzip" accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip content-length: 14345 content-type: application/javascript connection: close`

	oulook.com/favicon.ico?fp=172e5b6362817b33a26bdcbe3d1af8ae	103.224.212.240	302 Found	2 B
URL User Request GET HTTP/1.1 oulook.com/favicon.ico?fp=172e5b6362817b33a26bdcbe3d1af8ae IP 103.224.212.240:80 ASN #133618 Trellian Pty. Limited File type ASCII text Size 2 B (2 bytes) Hash e1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070 HTTP Headers `GET /favicon.ico?fp=172e5b6362817b33a26bdcbe3d1af8ae HTTP/1.1 Host: oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: __tad=1715349561.2025457 Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found date: Fri, 10 May 2024 13:59:22 GMT server: Apache location: http://ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 content-length: 2 content-type: text/html; charset=UTF-8 connection: close`

	ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12	91.195.240.106	441	0 B
URL User Request GET HTTP/1.1 ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 IP 91.195.240.106:80 ASN #47846 SEDO GmbH File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 HTTP/1.1 Host: ww16.oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 441 No Reason Phrase date: Fri, 10 May 2024 13:59:23 GMT server: NginX content-length: 0 X-Firefox-Spdy: h2`

	ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12	91.195.240.106	441	0 B
URL User Request GET HTTP/1.1 ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 IP 91.195.240.106:80 ASN #47846 SEDO GmbH File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 HTTP/1.1 Host: ww16.oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 441 date: Fri, 10 May 2024 13:59:23 GMT content-length: 0 server: NginX`

	ww16.oulook.com/favicon.ico	91.195.240.106	441	0 B
URL GET HTTP/1.1 ww16.oulook.com/favicon.ico IP 91.195.240.106:80 ASN #47846 SEDO GmbH Requested by http://ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ww16.oulook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww16.oulook.com/favicon.ico?sub1=20240510-2359-2274-8065-4a92fcdf9b12 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 441 date: Fri, 10 May 2024 13:59:23 GMT content-length: 0 server: NginX`