Report - stat.bundlehulu.com/

Report Overview

Visitedpublic

2025-07-22 06:30:10

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
stat.bundlehulu.com	unknown	2025-02-25	2025-05-09	2025-06-20	1.3 kB	2.7 kB	104.21.41.95

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-07-22 06:29:49	medium	Client IP	104.21.41.95	ET EXPLOIT_KIT Observed Fake Captcha Domain (stat .bundlehulu .com) in TLS SNI
2025-07-22 06:29:50	medium	104.21.41.95	Client IP	ET INFO Unconfigured nginx Access

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-22	medium	bundlehulu.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET stat.bundlehulu.com/

104.21.41.95

403 Forbidden

162 B

URL

stat.bundlehulu.com/

IP / ASN

104.21.41.95

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-11-07

Last Seen2025-07-30

Times Seen147

Size162 B (162 bytes)

MD51d1ed962f2c3b3101433906b6b71e395

SHA1323b3ebdc78e3e6f9581706771cbd61bfed318a4

SHA2562de2499f4e5f896995ee7ebaa527a39b75f520f98e12110ec6c156a2433dbe75

Certificate Info

IssuerGoogle Trust Services

Subjectbundlehulu.com

Fingerprint24:24:B2:F4:AA:18:1C:35:54:56:4D:41:53:09:E1:BE:BA:8A:A9:80

ValidityTue, 24 Jun 2025 00:10:03 GMT - Mon, 22 Sep 2025 01:06:22 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed
suricata	medium	ET INFO Unconfigured nginx Access

HTTP Headers

GET / HTTP/1.1
Host: stat.bundlehulu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Tue, 22 Jul 2025 06:29:49 GMT
content-type: text/html
server: cloudflare
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kX9o72Ep9aXuK6W56ZH2%2F%2Bl50MkPmrHbMbL0P0VU%2Bp7jQbfYfDZeX98fdE2UMXVwy9fNriVJXh4keVl4u9FDYphAyBpJ5U6voOyPg1Tpt7c%2F"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9630e2cabb670afe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET stat.bundlehulu.com/

104.21.41.95

200 OK

615 B

URL

stat.bundlehulu.com/

IP / ASN

104.21.41.95

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2023-04-05

Last Seen2025-08-01

Times Seen5038

Size615 B (615 bytes)

MD57df3d7cf3358af3f470ac7229387ef94

SHA1c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b

SHA256fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed
suricata	medium	ET INFO Unconfigured nginx Access

HTTP Headers

GET / HTTP/1.1
Host: stat.bundlehulu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 22 Jul 2025 06:29:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Last-Modified: Tue, 25 Feb 2025 19:32:01 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l7lsRbYX3l431NAeH5CJaw8UEeC0usbPDlsAeVVcnhEf24DFn%2Ba86%2FBOslGCd0EnayfAKVtEiOciAO7mnxdv5SxPZkd7rypB00vuzdowJ5Kt"}]}
Cf-Cache-Status: DYNAMIC
Content-Encoding: gzip
CF-RAY: 9630e2cc3e425699-OSL
alt-svc: h2=":443"; ma=60

GET stat.bundlehulu.com/favicon.ico

104.21.41.95

404 Not Found

162 B

URL

stat.bundlehulu.com/favicon.ico

IP / ASN

104.21.41.95

#13335 CLOUDFLARENET

Requested byhttp://stat.bundlehulu.com/

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-11-07

Last Seen2025-08-01

Times Seen1219

Size162 B (162 bytes)

MD537d5c3a24983196361e6ce9b1a499464

SHA12dd5878df894f3c648e42408879e9a61c112d1b3

SHA256766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: stat.bundlehulu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://stat.bundlehulu.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 22 Jul 2025 06:29:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vggf50E7KTY%2Fzg1hXAWVzZAyaJ6DBn%2BYQSZZ3oK0CwItA5mHpRR2ZvM2hvUUAVvtOKVpPrlqfCCU2LKPkrvGj%2F3R%2BWkir5pTifRDlXIJHVt6"}]}
Cache-Control: max-age=14400
Cf-Cache-Status: MISS
Vary: accept-encoding
Content-Encoding: gzip
CF-RAY: 9630e2ce28535699-OSL
alt-svc: h2=":443"; ma=60