Domain > 6pgm.xyz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-01	104.21.77.60 (ClassC)
2026-02-08	172.67.204.218 (ClassC)

HTTP/1.1 200 OKDate: Sun, 08 Feb 2026 18:38:47 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidateSpeculation-Rules: /cdn-cgi/speculationreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sMoPtlLeZYwloBXDORoj0lO%2BPbnwgfzF06YMRdeqJJEg0ZX8gb5bBggxFYRc74WiGiBcLQHlygHUqz8IpGD3F2RkO88JVrg%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareStrict-Transport-Security: max-age0; includeSubDomains; preloadcf-cache-status: DYNAMICCF-RAY: 9cad3ef84efcb642-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>!-- saved from url(0022)https://motbet888.com/ -->html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalable0>    meta namemobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-status-bar-style contentblack-translucent>    title>6PGM/title>    link relstylesheet href./css/reset.css>    link relstylesheet href./css/style.css>    link relstylesheet href./css/rwd.css>    style>        html, body {            margin: 0;            padding: 0;        }        .mask {            position: fixed;            width: 100%;            height: 100%;            left: 0;            top: 0;            background: rgba(0, 0, 0, 0.5);            display: none;            z-index: 10000;        }        .mask img {            width: 100%;            max-width: 792px;            position: absolute;            top: 0;            right: 0;        }        #copyHtml {            position: absolute;            top: -1000px;            left: -1000px;        }    /style>    !-- Meta Pixel Code -->    script srcjs/1024609045303035.js async>/script>    script async srcjs/fbevents.js>/script>    script>        !function (f, b, e, v, n, t, s) {            if (f.fbq) return;            n  f.fbq  function () {                n.callMethod ?                    n.callMethod.apply(n, arguments) : n.queue.push(arguments)            };            if (!f._fbq) f._fbq  n;            n.push  n;            n.loaded  !0;            n.version  2.0;            n.queue  ;            t  b.createElement(e);            t.async  !0;            t.src  v;            s  b.getElementsByTagName(e)0;            s.parentNode.insertBefore(t, s)        }(window, document, script,            https://connect.facebook.net/en_US/fbevents.js);        fbq(init, );        fbq(track, PageView);    /script>    noscript>img height1 width1 styledisplay:none                   srchttps://www.facebook.com/tr?id&evPageView&noscript1/>/noscript>    !-- End Meta Pixel Code -->    !-- 落地页 -->    script>        var packageName  com.x6pgm10.app;        function clickImgFun() {            fbq(track, pageclick, {});            var cookie  document.cookie;            var url  window.location.href;            // 创建 URLSearchParams 对象，并传入 URL 查询参数            var searchParams  new URLSearchParams(new URL(url).search);            // 使用 get() 方法获取特定参数的值            var fbclidValue  searchParams.get(fbclid);            if (isIOSDevice()) {                window.location.href  https://h5.6pgm.com;            } else {                window.open(https://firstaffluent.com/6PGM/com.x6pgm10.app.apk);            }        }        function trackFbEvent(name, params) {            var uuid  generateUUID();            // var url  window.location.href;            // var searchParams  new URLSearchParams(new URL(url).search);            // if (name  Purchase) {            //     const outer  JSON.parse(params);            //     const payload  JSON.parse(outer.param);            //     const currency  payload.currency || USD;            //     const value     Number(payload.value)   || 5;            //     fbq(track, Purchase, { value, currency }, { eventID: uuid });            // }else{            //     fbq(trackCustom, name, {}, {eventID: uuid});            // }            // send2Server(name, uuid);            return uuid;        }        function send2Server(name, uuid) {            var url2  window.location.href;            var searchParams  new URLSearchParams(new URL(url2).search);            var fbclidValue  searchParams.get(fbclid);            const xhr  new XMLHttpRequest();            const url  https://api.gakagame.com/api/v5/sendEvent?packageName + packageName + &eventName + name + &fbclid + fbclidValue + &uuid + uuid;            const data  {};            const jsonData  JSON.stringify(data);            xhr.open(POST, url, true);            xhr.setRequestHeader(Content-Type, application/json);            xhr.onreadystatechange  function () {                if (xhr.readyState  XMLHttpRequest.DONE) {                    if (xhr.status  200) {                        const response  JSON.parse(xhr.responseText);                        console.log(response);                    } else {                        console.log(请求失败);                    }                }            };            xhr.send(jsonData);        }        function generateUUID() {            return xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx.replace(/xy/g, function (c) {                var r  Math.random() * 16 | 0,                    v  c  x ? r : (r & 0x3 | 0x8);                return v.toString(16);            });        }        function isIOSDevice() {            const ua  navigator.userAgent || navigator.vendor || window.opera;            const iOS  /iPad|iPhone|iPod/.test(ua);            const iPadOS13Up  ua.includes(Macintosh) && ontouchend in document;            return iOS || iPadOS13Up;        }    /script>    !-- 落地页 -->/head>body>div stylemax-width: 450px; margin: 0 auto; position: relative;>    div classall styleposition: relative;>        !-- BG IMG-->        div styleposition: relative;>            img srccss/6PGM-LANDING PAGE-Mathrash-July16.webp stylewidth: 100%; height: auto; display: block;>            !-- DOWNLOAD BUTTON-->            div classdown_load style            position: absolute;            top: 48%;            left: 0;            right: 0;            height: 12%;            display: flex;            justify-content: center;            align-items: center;            z-index: 9999;        >                div stylemax-width: 350px; width: 100%; display: flex;>                    div styleflex: 1; height: 100%; display: flex; justify-content: center; align-items: center; onclickclickImgFun(); data-clipboard-actioncopy data-clipboard-target#copyHtml>                        img srccss/download-buttom.gif stylewidth: 100%; height: auto;>                    /div>                /div>            /div>            !-- GIF VIDEO -->            img srccss/Slideshow.gif style             position: absolute;             top: 60%;             bottom: 5vh;             left: 2%;             width: 95%;             max-width: 430px;             height: auto;             z-index: 1;>            !-- DOWNLOAD BANNER (BOTTOM) -->            div style            position: fixed;            bottom: -4px;            left: 0;            right: 0;            height: auto;            display: flex;            justify-content: center;            align-items: center;            z-index: 9998;        >                div stylemax-width: 450px; width: 100%; margin: 0 auto; text-align: center;>                    img srccss/buttom banner.gif onclickclickImgFun(); stylewidth: 100%; height: auto; max-height: 80px;>                /div>            /div>            div idAndroidInAppBrowserOpen classmask>                img srccss/mask_th_android.png classandroid>            /div>            div idiOSInAppBrowserOpen classmask>                img srccss/mask_th_ios.png classios>            /div>        /div>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 6pgm.xyz

Is this malicious?

DNS Resolutions

Port 443