Domain > c.pp6f.xyz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-07-25	104.21.53.244 (ClassC)
2025-11-17	172.67.221.27 (ClassC)

HTTP/1.1 200 OKDate: Mon, 17 Nov 2025 04:06:24 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidatecf-cache-status: DYNAMICreferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sJOxQIcGPFeSoZBCzcTDeiFGnfwvrZLMyvWxpLNhYA09Gli2GbYjit8i%2FJVtRqH5RO5RUmeND7%2FDreXEXgQTUOnfUdyEWBg52}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareStrict-Transport-Security: max-age0; includeSubDomains; preloadCF-RAY: 99fc5af3d9f70d87-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalable0>    meta namemobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-status-bar-style contentblack-translucent>    title>PP6/title>    link relstylesheet href./css/reset.css>    link relstylesheet hrefhttps://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css />    link relstylesheet href./css/style.css>    link relstylesheet href./css/rwd.css>    style>        html, body {            margin: 0;            padding: 0;        }        .mask {            position: fixed;            width: 100%;            height: 100%;            left: 0;            top: 0;            background: rgba(0, 0, 0, 0.5);            display: none;            z-index: 10000;        }        .mask img {            width: 100%;            max-width: 792px;            position: absolute;            top: 0;            right: 0;        }        #copyHtml {            position: absolute;            top: -1000px;            left: -1000px;        }    /style>    !-- Meta Pixel Code -->    script srcjs/1024609045303035.js async>/script>    script async srcjs/fbevents.js>/script>    script>        !function (f, b, e, v, n, t, s) {            if (f.fbq) return;            n  f.fbq  function () {                n.callMethod ?                    n.callMethod.apply(n, arguments) : n.queue.push(arguments)            };            if (!f._fbq) f._fbq  n;            n.push  n;            n.loaded  !0;            n.version  2.0;            n.queue  ;            t  b.createElement(e);            t.async  !0;            t.src  v;            s  b.getElementsByTagName(e)0;            s.parentNode.insertBefore(t, s)        }(window, document, script,            https://connect.facebook.net/en_US/fbevents.js);        fbq(init, );        fbq(track, PageView);    /script>    noscript>img height1 width1 styledisplay:none                   srchttps://www.facebook.com/tr?id&evPageView&noscript1/>/noscript>    !-- End Meta Pixel Code -->    !-- 落地页 -->      script>         var packageName  com.pp639149.app;         function clickImgFun() {             fbq(track, pageclick, {});              var cookie  document.cookie;             var url  window.location.href;                      // 创建 URLSearchParams 对象，并传入 URL 查询参数             var searchParams  new URLSearchParams(new URL(url).search);                      // 使用 get() 方法获取特定参数的值             var fbclidValue  searchParams.get(fbclid);             if (isIOSDevice()) {                 window.location.href  https://h5.pp6.club;             } else {                 window.open(https://firstaffluent.com/PP6/com.pp639149.app.apk);             }         }                  function trackFbEvent(name, params) {            var uuid  generateUUID();            // var url  window.location.href;            // var searchParams  new URLSearchParams(new URL(url).search);            // if (name  Purchase) {            //     const outer  JSON.parse(params);                      //     const payload  JSON.parse(outer.param);               //     const currency  payload.currency || USD;            //     const value     Number(payload.value)   || 5;               //     fbq(track, Purchase, { value, currency }, { eventID: uuid });            // }else{            //     fbq(trackCustom, name, {}, {eventID: uuid});            // }            // send2Server(name, uuid);                         return uuid;         }                  function send2Server(name, uuid) {             var url2  window.location.href;             var searchParams  new URLSearchParams(new URL(url2).search);             var fbclidValue  searchParams.get(fbclid);             const xhr  new XMLHttpRequest();             const url  https://api.gakagame.com/api/v5/sendEvent?packageName + packageName + &eventName + name + &fbclid + fbclidValue + &uuid + uuid;             const data  {};             const jsonData  JSON.stringify(data);             xhr.open(POST, url, true);             xhr.setRequestHeader(Content-Type, application/json);             xhr.onreadystatechange  function () {                 if (xhr.readyState  XMLHttpRequest.DONE) {                     if (xhr.status  200) {                         const response  JSON.parse(xhr.responseText);                         console.log(response);                     } else {                         console.log(请求失败);                     }                 }             };             xhr.send(jsonData);         }                  function generateUUID() {             return xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx.replace(/xy/g, function (c) {                 var r  Math.random() * 16 | 0,                     v  c  x ? r : (r & 0x3 | 0x8);                 return v.toString(16);             });         }                  function isIOSDevice() {             const ua  navigator.userAgent || navigator.vendor || window.opera;             const iOS  /iPad|iPhone|iPod/.test(ua);             const iPadOS13Up  ua.includes(Macintosh) && ontouchend in document;                      return iOS || iPadOS13Up;             }      /script>    !-- 落地页 -->/head>body>div stylebackground-color: #5d2b93; max-width: 450px; margin: 0 auto; min-height: 100vh; position: relative; overflow: hidden; display: flex; flex-direction: column; align-items: center;>    div classall styleposition: relative;>        !-- main img -->            img srccss/new/PP6 Landing Page v4 copy.webp stylewidth: 100%; max-width: 450px; height: auto;>        !-- DOWNLOAD BUTTON -->             div onclickclickImgFun(); data-clipboard-actioncopy data-clipboard-target#copyHtml styleposition: absolute;bottom:52%;width: 82%;left: 7%;height: 10%;>        img srccss/new/ButtonGIFs_Balor-3.gif stylewidth: 105%; height: auto;>    /div>                !-- 3.webp below the 2.gif -->    div styleposition: absolute;bottom:42%;width: 82%;left: 7%;height: 10%;>        img srccss/Games/Artboard 1 copy.webp stylewidth: 106%; height: auto;>    /div>    /div>        !-- Style for 4.webp background -->style>#fk-bottom-ad {  background-image: url(css/new/BIG-WIN.gif);  background-size: 100% 100%;  background-repeat: no-repeat;  width: 100%;  height: 23.5%;        /* SLIDE BG HEIGHT FROM*/  position: absolute;     bottom: 7%;           /* SLIDE BG DISTANCE FROM BOTTOM*/  z-index: 1;}/* Container for Swiper */.swiper.slideshow-container {  width: 90vw;  max-width: 395px;    /* MAX slideshow image*/  height: 13.4%;  position: absolute;  left: 8%;    width: 84%;         /* SLideshow image adjustment left*/  bottom: 8%;         /* SLideshow image adjustment bottom*/  transform: translateY(0);   z-index: 15;}.swiper-wrapper {  height: 100%;}/* Slides stay stable */.swiper-slide img {  width: 100%;  height: 100%;           object-fit: cover;}/style>!-- fk-bottom-ad SEPARATED division-->        div idfk-bottom-ad>/div>   !-- SLIDE IMAGE-->  div classswiper slideshow-container>    div classswiper-wrapper>      div classswiper-slide>        img srccss/Games/1 copy.webp stylewidth: 100%; height: 100%; object-fit: cover; />      /div>      div classswiper-slide>        img srccss/Games/2 copy.webp stylewidth: 100%; height: 100%; object-fit: cover; />      /div>      div classswiper-slide>        img srccss/Games/3 copy.webp stylewidth: 100%; height: 100%; object-fit: cover; />      /div>    /div>    div classswiper-pagination>/div>  /div>          !-- Include Swiper JS -->        script srchttps://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js>/script>        script>        const mySwiper  new Swiper(.slideshow-container, {            loop: true,            autoplay: {            delay: 3000,            disableOnInteraction: false,            },            pagination: {            el: .swiper-pagination,            },        });        /script>    !-- DOWNLOAD BANNER (BOTTOM) -->            div style                position: fixed;                bottom: -8px;                left: -0.1px;                right: 0;                display: flex;                justify-content: center;                align-items: center;                z-index: 9998;            >                div stylemax-width: 450px; width: 100%; margin: 0 auto; text-align: center;>                    img srccss/new/BOTTOM BANNER v2.gif onclickclickImgFun(); stylewidth: 100%; height: auto; max-height: 80px;>                /div>            /div>        /div>    /div>div idAndroidInAppBrowserOpen classmask>    img srccss/mask_th_android.png classandroid>/div>div idiOSInAppBrowserOpen classmask>    img srccss/mask_th_ios.png classios>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > c.pp6f.xyz

Is this malicious?

DNS Resolutions

Port 443