Domain > hx6qz4.nfutfe.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-10-13	172.64.166.5 (ClassC)
2025-08-02	35.190.46.2 (ClassC)

HTTP/1.1 200 OKserver: nginx/1.20.2date: Sat, 02 Aug 2025 10:03:24 GMTcontent-type: text/htmlContent-Length: 5161last-modified: Mon, 15 Jan 2024 02:08:28 GMTvary: Accept-Encodingetag: 65a4939c-1429cache-control: no-cacheaccept-ranges: bytesvia: 1.1 google

!doctype html>html langzh>head>meta charsetUTF-8>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,user-scalable0>script srchttps://g.alicdn.com/woodpeckerx/jssdk/wpkReporter.js crossorigintrue>/script>script srchttps://g.alicdn.com/woodpeckerx/jssdk/plugins/globalerror.js crossorigintrue>/script>script srchttps://g.alicdn.com/woodpeckerx/jssdk/plugins/performance.js crossorigintrue>/script>script>window.wpkReporter&&(window.wpknew window.wpkReporter({bid:berg-download,rel:2.42.1,sampleRate:1,plugins:window.wpkglobalerrorPlugin,{jsErr:!0,jsErrSampleRate:1,resErr:!0,resErrSampleRate:1},window.wpkperformancePlugin,{enable:!0,sampleRate:.5}}),window.wpk.install())/script>script>function loadBaiduHmt(t){console.log(百度统计,t);var edocument.createElement(script);e.srchttps://hm.baidu.com/hm.js?+t;var odocument.getElementsByTagName(script)0;o.parentNode.insertBefore(e,o)}function baiduPush(t,e,o){window._hmt.push(_trackEvent,t,e,o)}console.log(加载百度统计脚本...),window._hmtwindow._hmt||;const BUILD_ENVquark,token42296466acbd6a1e84224ab1433a06cc;loadBaiduHmt(token)/script>script>function send(n){(new Image).srcn}function reportLoading(n){nn||{};var ofunction(){for(var n(window.location.search.substr(1)||).split(&),o{},e0;en.length;e++){var rne.split();or0r1}return function(){return o}}();function e(){var nwindow.navigator.userAgent.toLowerCase();return n.indexOf(ucbrowser)>0||n.indexOf(ucmobile)>0}function r(){return window.navigator.userAgent.toLowerCase().indexOf(quark)>0}var afunction(){for(var n{},o0;oarguments.length;o+1)for(var eargumentso,rObject.keys(e),a0;ar.length;a+1)nraera;return n}({appid:29351a4155a4,stat_a:berg,stat_b:download,ev_ct:berg_download,page:page_loading_first,page_h5:page_loading_first,lt:pageview,c_lt:pageview,event_id:2001,keyword:,referrer:(document.referrer||).slice(0,500),host:location.host,url:window.location.href.slice(0,500),cookie:document.cookie.slice(0,500),time:Date.now(),entry:o().entry||,_ua:window.navigator.userAgent,isUC:e(),isQuark:r(),is_duannei:e()||r()},n),t;for(var i in a)a.hasOwnProperty(i)&&t.push(.concat(encodeURIComponent(i),).concat(encodeURIComponent(ai)));var ct.join(&).replace(/%20/g,+),s.concat(https://track.uc.cn/collect,?).concat(c,&).concat(uc_param_strdsfrpfvedncpssntnwbipreimeutsv);(e()||r())&&androidfunction(){var nwindow.navigator.userAgent.toLowerCase();return window.ucweb?android:n.match(/ios/i)||n.match(/ipad/i)||n.match(/iphone/i)?iphone:n.match(/android/i)||n.match(/apad/i)?android:window.ucbrowser?iphone:unknown}()&&navigator.sendBeacon?send(s+&is_beacon1):send(s)}reportLoading(),console.log(根据客户端语言环境和UA进行路由跳转);var baiduPushwindow.baiduPush||function(){},uawindow.navigator.userAgent.toLowerCase();function toPage(n){console.log(toPage -> ,n),window.location.hrefn}(ua.indexOf(ucbrowser)>0||ua.indexOf(quark)>0)&&-1ua.indexOf(uws/)?(baiduPush(userAgen,ucbrowser,gourl),toPage(http://+window.location.host+/sq.html?entry+window.location.host)):-1!ua.indexOf(android)&&-1!ua.indexOf(micromessenger)&&(baiduPush(userAgen,ucbrowser,GoWX),toPage(/wx.html))/script>script>for(var qsList(window.location.search||?).substring(1).split(&),lenqsList.length,i0;ilen;i++){var eqsListi;if(debugtruee){var $headdocument.getElementsByTagName(head)0,$script1document.createElement(script);$script1.setAttribute(crossorigin,anonymous),$script1.setAttribute(src,//image.uc.cn/s/uae/g/01/welfareagency/vconsole.min-3.3.0.js),$head.insertBefore($script1,$head.lastChild),$script1.onloadfunction(){var edocument.createElement(script);e.setAttribute(crossorigin,anonymous),e.setAttribute(src,//image.uc.cn/s/uae/g/01/welfareagency/js/vconsle.js),$head.insertBefore(e,$head.lastChild)};break}}/script>title>/title>script>var fontSizewindow.innerWidth/.75;document.querySelector(html).style.fontSizefontSize+px,document.titlelocation.hostname/script>link hrefhttps://image.uc.cn/s/uae/g/3o/berg/static/index.c4bc5b38d870fecd8a1f.css relstylesheet>/head>body>div classnav-table-container>/div>ul iddesc classdesc>li>h1>紧急通知/h1>br>h2>本站仅支持b iducweb onclickbaiduPush(click,btn,ucweb)>夸克/专用浏览器/b>访问！/h2>/li>/ul>div idbtn classbtn-dl>div idbtndl onclickbaiduPush(click,btn,openuc)>用夸克打开/div>/div>div idtwocode classtwocode>div idbtndl onclickwindow.open(https://download.quark.cn/download/quarkpc?platformandroid&chpcquark@bingshan)>用 夸克 打开/div>/div>div classfooter idfooter>div>夸克访问网站：/div>div classno-ad>没有广告/div>div>电影播放不卡顿/div>div>精彩视频存入网盘随时看/div>/div>script srchttps://image.uc.cn/s/uae/g/3o/berg/static/archer_index.e96dc6dc6863835f4ad0.js>/script>/body>/html>

Subdomains

Date	Domain	IP
hwd8z3.nfutfe.com	2025-08-02	35.190.46.2
hx6rz3.nfutfe.com	2025-08-02	35.190.46.2
hx6qz4.nfutfe.com	2025-08-02	35.190.46.2
hx6xz4.nfutfe.com	2025-08-02	35.190.46.2
hx6rz7.nfutfe.com	2025-08-02	35.190.46.2
hx6rz8.nfutfe.com	2025-08-02	35.190.46.2
airline.nfutfe.com	2024-09-14	172.67.169.163
cell.nfutfe.com	2024-09-14	104.21.27.197

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hx6qz4.nfutfe.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains