Report - hillhursthomes.com/

Report Overview

Visited public
2023-12-04 22:17:35
Tags
URL
hillhursthomes.com/
Finishing URL
www.hillhursthomes.com/
IP / ASN
162.255.119.115
#22612 NAMECHEAP-NET
Title
hillhursthomes.com - hillhursthomes Ressurser og informasjon

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
afs.googleusercontent.com	12123	2008-11-17	2013-05-06 21:11:00	2023-12-04 05:11:59	1.0 kB	2.1 kB	142.250.74.97
hillhursthomes.com	unknown	2023-09-18	2014-10-07 01:46:20	2020-01-21 10:29:08	682 B	594 B	162.255.119.115
www.hillhursthomes.com	unknown	unknown	No data	No data	1.2 kB	16 kB	91.195.240.19
img.sedoparking.com	54200	2001-09-18	2013-04-23 00:23:29	2023-12-04 05:11:22	1.2 kB	50 kB	205.234.175.175
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-11-19 18:48:38	348 B	55 kB	142.250.74.100
www.adsensecustomsearchads.com	unknown	2011-01-28	2015-09-02 02:57:40	2023-12-04 05:09:58	1.9 kB	5.7 kB	216.58.211.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 22:17:36	low	162.255.119.115	Client IP	ET INFO Namecheap URL Forward
2023-12-04 22:17:38	low	162.255.119.115	Client IP	ET INFO Namecheap URL Forward

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	www.adsensecustomsearchads.com/afs/ads/i/iframe.html	ScriptElement	1.3 kB	2023-04-05	2025-03-02
Pretty URL www.adsensecustomsearchads.com/afs/ads/i/iframe.html IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:36 Last Seen2025-03-02 05:25 Times Seen67768 Hash 33839cb72649c81ab58b763c95b4a163 0c9b62881e660fded013cee58439ae287690065a cdded269406c9b2b49a3066d12e75913abf338cdd7fa00e31fff299efef1cb76 Loading...

	www.hillhursthomes.com/	ScriptElement	3.0 kB	2024-08-20	2024-08-20
Pretty URL www.hillhursthomes.com/ IP 91.195.240.19 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:46 Last Seen2024-08-20 16:46 Times Seen1 Hash 173369aaf2792eecf640bfc570284f95 8ef26f6238b480bcb00f575b9c39b4c9fe8ef655 a1210f34ff8b3c3fe567ab2691a4755883560e92e16985aba21c733c5f79e738 Loading...

	www.google.com/adsense/domains/caf.js	ScriptElement	150 kB	2023-11-09	2023-12-13
Pretty URL www.google.com/adsense/domains/caf.js IP 142.250.74.100 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 15:54 Last Seen2023-12-13 16:25 Times Seen2531 Hash 0808101bcc6e1191c5b6073e31bcb441 325317ef7ae2592656dcabfb8462b40f3e3ebc08 39359651a0d752d1e777094fd9deed5e4c5993ff6b2aebfd855761f41369b13e Loading...

HTTP Transactions (13)

URL IP Response Size

hillhursthomes.com/

162.255.119.115

302 Found

53 B

URL User Request GET HTTP/1.1
hillhursthomes.com/
IP
162.255.119.115:80
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
53 B (53 bytes)
Hash
989c5745d4bc635f23289f00365b11f0
9e7b1e39ed779e7173f24b8d44f471033efd4a65
6e0b9bd305249fa5881136e17ea0b151f193f13e05c0719a966e252663e345cb

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: hillhursthomes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Mon, 04 Dec 2023 22:17:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 53
Connection: keep-alive
Location: http://www.hillhursthomes.com/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

www.hillhursthomes.com/

91.195.240.19

200 OK

7.3 kB

URL User Request GET HTTP/1.1
www.hillhursthomes.com/
IP
91.195.240.19:80
ASN
#47846 SEDO GmbH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10825)
Size
7.3 kB (7277 bytes)
Hash
3478fa93ad3f98eb5b42dc045a8b8e96
39b8efbaca1d7a686959d95fff1e4b7e21b8e45e
2c5917a91d896fe831cf9ea3cc56d6445a49db55efb22525d33e78d1d633c00d

HTTP Headers

GET / HTTP/1.1
Host: www.hillhursthomes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 04 Dec 2023 22:17:21 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_vFkYVLL15rarmD558CSyTRqIIclERumgUw+ENYqwI1AukcE1FkLBvKv+jEkUEiNL2oikawk5rDeV1HRFWPsgQw==
last-modified: Mon, 04 Dec 2023 22:17:21 GMT
x-cache-miss-from: parking-698fb476bf-6x2qm
server: NginX
content-encoding: gzip

hillhursthomes.com/

162.255.119.115

302 Found

53 B

URL User Request GET HTTP/1.1
hillhursthomes.com/
IP
162.255.119.115:80
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
53 B (53 bytes)
Hash
989c5745d4bc635f23289f00365b11f0
9e7b1e39ed779e7173f24b8d44f471033efd4a65
6e0b9bd305249fa5881136e17ea0b151f193f13e05c0719a966e252663e345cb

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: hillhursthomes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Mon, 04 Dec 2023 22:17:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 53
Connection: keep-alive
Location: http://www.hillhursthomes.com/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

www.hillhursthomes.com/

91.195.240.19

200 OK

7.3 kB

URL User Request GET HTTP/1.1
www.hillhursthomes.com/
IP
91.195.240.19:80
ASN
#47846 SEDO GmbH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10825)
Size
7.3 kB (7276 bytes)
Hash
7f5e2f9c24ebe986cce9208944c1526c
3df8959b7f23f02fab6c680a9ce49b12c803566f
69ec59240634aca78cccd98c31361ce43ede6b15522d77c43e26e9fcb6bb9057

HTTP Headers

GET / HTTP/1.1
Host: www.hillhursthomes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 04 Dec 2023 22:17:31 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_vFkYVLL15rarmD558CSyTRqIIclERumgUw+ENYqwI1AukcE1FkLBvKv+jEkUEiNL2oikawk5rDeV1HRFWPsgQw==
last-modified: Mon, 04 Dec 2023 22:17:31 GMT
x-cache-miss-from: parking-698fb476bf-cmbck
server: NginX
content-encoding: gzip

img.sedoparking.com/templates/bg/arrows-curved.png

205.234.175.175

200 OK

14 kB

URL GET HTTP/1.1
img.sedoparking.com/templates/bg/arrows-curved.png
IP
205.234.175.175:80
ASN
#30081 CACHENETWORKS

Requested by
http://www.hillhursthomes.com/

File type
PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13502 bytes)
Hash
107694ee1e94990d97b7e58651ffd6a0
7dd9ae7badf78be01ea0623df1e90171348716ff
7aa2a3e9a9575a27f5593c3b0357423128c468a46ed20d284ce5a21555ee67bc

HTTP Headers

GET /templates/bg/arrows-curved.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 22:17:31 GMT
Content-Type: image/png
Content-Length: 13502
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Mon, 11 Dec 2023 22:17:31 GMT
X-CFHash: "107694ee1e94990d97b7e58651ffd6a0"
X-CFF: B
Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT
X-CF3: H
CF4Age: 9583
x-cf-tsc: 1701708582
CF4ttl: 31526416.000
X-CF2: H
Server: CFS 1124
X-CF-ReqID: 9716301296ab28e5be866df5a3ec472b
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes

img.sedoparking.com/templates/images/hero_nc.svg

205.234.175.175

200 OK

20 kB

URL GET HTTP/2
img.sedoparking.com/templates/images/hero_nc.svg
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
http://www.hillhursthomes.com/
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71
ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT

File type
SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1738)
Size
20 kB (20346 bytes)
Hash
5a2c392e7acdf6e9de6e00129500503c
c8d0f80381e4ce180b5eb3c4c98539907292a7bb
878da09a057ec8f1775cdc522e5f7ec44966df547a87a9c29826ba114833c24b

HTTP Headers

GET /templates/images/hero_nc.svg HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:17:31 GMT
content-type: image/svg+xml
content-length: 20346
access-control-allow-origin: *
x-cff: B
last-modified: Thu, 05 Oct 2023 09:16:15 GMT
vary: Accept-Encoding
x-cf3: H
cf4age: 1983
x-cf-tsc: 1701544285
cf4ttl: 31534016.000
content-encoding: gzip
x-cf2: H
server: CFS 1124
x-cf-reqid: e33598f36818e2b06fdb5e27f74d240f
x-cf1: 11696:fB.arn1:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

www.google.com/adsense/domains/caf.js

142.250.74.100

200 OK

54 kB

URL GET HTTP/1.1
www.google.com/adsense/domains/caf.js
IP
142.250.74.100:80
ASN
#15169 GOOGLE

Requested by
http://www.hillhursthomes.com/

File type
ASCII text, with very long lines (1888)
Size
54 kB (54356 bytes)
Hash
0808101bcc6e1191c5b6073e31bcb441
325317ef7ae2592656dcabfb8462b40f3e3ebc08
39359651a0d752d1e777094fd9deed5e4c5993ff6b2aebfd855761f41369b13e

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Mon, 04 Dec 2023 22:17:31 GMT
Expires: Mon, 04 Dec 2023 22:17:31 GMT
Cache-Control: private, max-age=3600
ETag: "12169742205723775177"
X-Content-Type-Options: nosniff
Link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

www.adsensecustomsearchads.com/afs/ads/i/iframe.html

216.58.211.14

729 B

URL
www.adsensecustomsearchads.com/afs/ads/i/iframe.html
IP
216.58.211.14:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1559)
Size
729 B (729 bytes)
Hash
e97793ccd45b1e1e40e6e4e703d8fb32
ff1aa3527e8e53e944847d7f2970a655ef72ae3b
bb05d70d829a8ef8c3c86e460a71e3123ffc604e26e7714271408d3d6abc80df

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-ZIbxf7wulYua35ZJn5I78A' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 729
date: Mon, 04 Dec 2023 22:17:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Tue, 14 Nov 2023 07:00:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.hillhursthomes.com/search/tsc.php?200=NTM1OTU1Mzk5&21=OTEuOTAuNDIuMTU0&681=MTcwMTcyODI1MTYwZWYzYjY3MzJlNThiZjRhNTVlNWEyYmMyODc4NmQ5&crc=41cb951d5f8c81fb243bd97ff3cdede0da068889&cv=1

91.195.240.19

0 B

URL
www.hillhursthomes.com/search/tsc.php?200=NTM1OTU1Mzk5&21=OTEuOTAuNDIuMTU0&681=MTcwMTcyODI1MTYwZWYzYjY3MzJlNThiZjRhNTVlNWEyYmMyODc4NmQ5&crc=41cb951d5f8c81fb243bd97ff3cdede0da068889&cv=1
IP
91.195.240.19:0
ASN
#47846 SEDO GmbH

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /search/tsc.php?200=NTM1OTU1Mzk5&21=OTEuOTAuNDIuMTU0&681=MTcwMTcyODI1MTYwZWYzYjY3MzJlNThiZjRhNTVlNWEyYmMyODc4NmQ5&crc=41cb951d5f8c81fb243bd97ff3cdede0da068889&cv=1 HTTP/1.1
Host: www.hillhursthomes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 04 Dec 2023 22:17:31 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.17
x-cache-miss-from: parking-698fb476bf-xftqn
server: NginX

www.adsensecustomsearchads.com/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.hillhursthomes.com%2Fcaf%2F%3Fses%3DY3JlPTE3MDE3MjgyNTEmdGNpZD13d3cuaGlsbGh1cnN0aG9tZXMuY29tNjU2ZTRmZmIzNGUyNTAuMzMyNjIzMTkmdGFzaz1zZWFyY2gmZG9tYWluPWhpbGxodXJzdGhvbWVzLmNvbSZhX2lkPTMmc2Vzc2lvbj1Yc0h2TFdEbEMyZmN1SF9NaVpiQw%3D%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301383&format=r3%7Cs&nocache=4541701728257416&num=0&output=afd_ads&domain_name=www.hillhursthomes.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701728257424&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&cl=579967862&uio=--&cont=rb-default&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww.hillhursthomes.com%2F

216.58.211.14

2.9 kB

URL
www.adsensecustomsearchads.com/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.hillhursthomes.com%2Fcaf%2F%3Fses%3DY3JlPTE3MDE3MjgyNTEmdGNpZD13d3cuaGlsbGh1cnN0aG9tZXMuY29tNjU2ZTRmZmIzNGUyNTAuMzMyNjIzMTkmdGFzaz1zZWFyY2gmZG9tYWluPWhpbGxodXJzdGhvbWVzLmNvbSZhX2lkPTMmc2Vzc2lvbj1Yc0h2TFdEbEMyZmN1SF9NaVpiQw%3D%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301383&format=r3%7Cs&nocache=4541701728257416&num=0&output=afd_ads&domain_name=www.hillhursthomes.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701728257424&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&cl=579967862&uio=--&cont=rb-default&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww.hillhursthomes.com%2F
IP
216.58.211.14:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13715)
Size
2.9 kB (2904 bytes)
Hash
915124b787f4d080902e7583137cb48c
c5d46f41791f9b86942216a5b4753b2267f76834
f38ab3f137894a7baa6b4097e1f70865175c876738f2cf7a7538b9adcc026263

HTTP Headers

GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo85_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.hillhursthomes.com%2Fcaf%2F%3Fses%3DY3JlPTE3MDE3MjgyNTEmdGNpZD13d3cuaGlsbGh1cnN0aG9tZXMuY29tNjU2ZTRmZmIzNGUyNTAuMzMyNjIzMTkmdGFzaz1zZWFyY2gmZG9tYWluPWhpbGxodXJzdGhvbWVzLmNvbSZhX2lkPTMmc2Vzc2lvbj1Yc0h2TFdEbEMyZmN1SF9NaVpiQw%3D%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301383&format=r3%7Cs&nocache=4541701728257416&num=0&output=afd_ads&domain_name=www.hillhursthomes.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1701728257424&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1146&frm=0&cl=579967862&uio=--&cont=rb-default&jsid=caf&jsv=579967862&rurl=http%3A%2F%2Fwww.hillhursthomes.com%2F HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 04 Dec 2023 22:17:31 GMT
expires: Mon, 04 Dec 2023 22:17:31 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-yCL5jc1ZcxOV5i_A5Uqivw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2904
x-xss-protection: 0
set-cookie: CONSENT=PENDING+904; expires=Wed, 03-Dec-2025 22:17:31 GMT; path=/; domain=.adsensecustomsearchads.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

img.sedoparking.com/templates/logos/sedo_logo.png

205.234.175.175

15 kB

URL
img.sedoparking.com/templates/logos/sedo_logo.png
IP
205.234.175.175:0
ASN
#30081 CACHENETWORKS

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size
15 kB (15086 bytes)
Hash
def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4

HTTP Headers

GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.hillhursthomes.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 22:17:32 GMT
Content-Type: image/png
Content-Length: 15086
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Mon, 11 Dec 2023 22:17:32 GMT
X-CFHash: "def00c11b1596db4efee6a9fbe64fc27"
X-CFF: B
Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT
X-CF3: H
CF4Age: 2436
x-cf-tsc: 1701545420
CF4ttl: 31533564.000
X-CF2: M
Server: CFS 1124
X-CF-ReqID: 2527c0cbeab806bd975f916078f5da32
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.97

174 B

URL
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.97:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
174 B (174 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 02:49:01 GMT
expires: Tue, 05 Dec 2023 01:49:01 GMT
cache-control: public, max-age=82800
age: 70111
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2

142.250.74.97

272 B

URL
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
IP
142.250.74.97:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size
272 B (272 bytes)
Hash
a6ad6e65373db8c1b1f154c4c83f8ce5
84cc007d6d682c589e1e1f87482a5278830f3000
920a378947204498c122722933b3a4b67788a2b6fade8bd0d47cf830eeee0563

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:35:32 GMT
expires: Tue, 05 Dec 2023 19:35:32 GMT
cache-control: public, max-age=82800
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 6120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size