{"report_id":"605fa538-0661-4e88-94f3-130dcbdb4dbf","version":0,"status":"done","tags":[],"date":"2026-10-04T05:37:25Z","url":{"schema":"http","addr":"salecode.cc/","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"salecode.cc/","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"title":"Discount Codes \u0026 Referral Codes – Verified | salecode.cc","dom":{"size":32448,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3913)","md5":"31614822350ba5a6cf263398519a91da","sha1":"2c9355ce4db372104eea2754150d2d6fbcafaf17","sha256":"18d4f1b437998b44bf92ed06f2fa987dc5b07d54b46f6ecb8f179becef06565f","sha512":"40b6e7c79526715413471caeff1d68cb9a203872c4532dbfe0faa8ce6e68ab1c83e7681f6298c6c6730b189c5c281fad03783e662263d6f30ad00725a8e791d4","ssdeep":"384:BrTIJlk3J+EGZRQUQ9lwf2DXzsdRdbT/eyPBSn25c48sa+9xgzMVijZQ:qjC7KsDsdRdbT1QWc4J19xxINQ","tlshash":"21e2d5e7e61a147f144382a86fe36268331e509bea45d8647edd436d8f88ef1d06374c","dom_hash":"domhash64eb496fdaf47cc86add49a9004aded6","first_seen":"2026-10-04T05:32:44.701987Z","last_seen":"2026-10-04T05:37:25.910572Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"salecode.cc/","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T05:37:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"salecode.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"salecode.cc","ip":{"addr":"104.21.6.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-10-04T05:32:40.79295Z","last_seen":"2026-10-04T05:32:40.79295Z","alert_count":3,"request_count":3,"received_data":34783,"sent_data":1410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salecode.cc/","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"590a17993168210aeb1b7eb9fb10bf26","sha1":"2388950c97f09b296826af420fe73ceae380bb3b","sha256":"2654049e9948d004eb45544829d0b63b23414233dd51f60a0f2410bb8705ba10","sha512":"6585325a18e8964000b23b3082060070dadb92807c73db9e35104d9ef8081c97754abe29be7048a48e51215339c4b806369f9af9791aaaffa4f4c5d84be8e3d1","ssdeep":"","tlshash":"6f119c5931ba1976067b11a687df96ce722e31077084c93e3c4d47580fd1320b2f22d8","size":1005,"data":"","first_seen":"2026-10-04T05:32:44.707276Z","last_seen":"2026-10-04T05:37:25.914071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"salecode.cc/","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:36:56.578Z","timestamp":1791092216578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salecode.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 10:01:56 GMT","end":"Thu, 31 Dec 2026 11:01:53 GMT"},"fingerprint":{"sha1":"5D:50:64:F3:CF:F5:24:A2:FE:06:00:22:ED:A8:12:4E:E1:6E:6B:A2","sha256":"93:86:43:7A:5E:61:52:4F:74:83:6B:BD:83:4D:F7:53:F9:D4:AE:7F:D1:AD:AB:7E:2D:A9:C6:F3:31:1B:A0:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: salecode.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 05:36:56 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9x3Br7B9gwH31jxefmoCyBFCmDnWIYlXmjpYTjJbs7JjddBbnhbMieV%2Ft5ajuhuC0cVmFnugGUDxlfgb6UuyaNuDci%2Fjp3GEKhJ6EALK37po1jflO%2B5sHiWVPfrOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a451d4f1cfb77130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32318,"size_decoded":10861,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3811)","md5":"9516d50581a9b9fac5c53101661978b9","sha1":"8520e013fbdf28ff18cbb76606f3b095f7bf31f5","sha256":"bbba1225bfcedd46102f702a65e81986fd0e25e142e3910e3468246adb6da3d1","sha512":"aa21544680ee679e77ee34f5ab0b5c37d10132242454e4a90b898ea9300c7e21ad658ce3c4b32ab5b501597afd041c3ce3e5f267455fdde6e226ea5ad1e94ae7","ssdeep":"384:vrTIJlJ3J+EGZRQUQ9lwf2DXzsdRCeNPK4ncYc48daX94gItAijZQ:AjB7KsDsdRDBtc4gw945pNQ","tlshash":"0ee2e5e7e71a146f244382a8afe36269331e505be945d8647edd436c8fc8af5e06370c","first_seen":"2026-10-04T05:32:44.703827Z","last_seen":"2026-10-04T05:37:25.911737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"salecode.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salecode.cc/api/codes.json","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://salecode.cc/","date":"2026-10-04T05:36:56.905Z","timestamp":1791092216905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salecode.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 10:01:56 GMT","end":"Thu, 31 Dec 2026 11:01:53 GMT"},"fingerprint":{"sha1":"5D:50:64:F3:CF:F5:24:A2:FE:06:00:22:ED:A8:12:4E:E1:6E:6B:A2","sha256":"93:86:43:7A:5E:61:52:4F:74:83:6B:BD:83:4D:F7:53:F9:D4:AE:7F:D1:AD:AB:7E:2D:A9:C6:F3:31:1B:A0:24"}}},"request":{"raw":"GET /api/codes.json HTTP/1.1\r\nHost: salecode.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://salecode.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 05:36:56 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=300\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZVnMW6EOVT%2FNc%2FzsGEL%2BvFZfmRL9EtQzExYNPGjXk5uwZH5w6iR0FGbC8vVKQNlwLn63yMtoSHfsiWrGnCriknN3JnXS0kPDgT1NNnMYGl8UoGzZAb6Qnyj%2FJfRxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a451d4f3afc77130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":777,"mime_type":"application/json","magic":"JSON text data","md5":"14937ca97d65db8956a0b05deeeb1455","sha1":"d1bdba20d0129564f321d029247f4355df84e7b4","sha256":"05e5f4e6577876a199219841c95854d34a0b0b0deb911bfba172a8c81233e6ac","sha512":"120ac4399b67994a5cb00fe937b02094d397ff88625fafaf81dfc9e6cd4ec645ca8c8f45bf82a32c65a6856c8690e3ecfe4d942333c59e57b2b72b7eaade0e37","ssdeep":"","tlshash":"cea022a0802cb82f00ee08000e03c0bf00c0280b08820c00eac2388802c0388a2ef300","first_seen":"2026-10-04T05:32:44.705171Z","last_seen":"2026-10-04T05:37:25.912614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"salecode.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salecode.cc/favicon.svg","fqdn":"salecode.cc","domain":"salecode.cc","tld":"cc"},"ip":{"addr":"104.21.6.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salecode.cc/","date":"2026-10-04T05:36:56.981Z","timestamp":1791092216981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salecode.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 10:01:56 GMT","end":"Thu, 31 Dec 2026 11:01:53 GMT"},"fingerprint":{"sha1":"5D:50:64:F3:CF:F5:24:A2:FE:06:00:22:ED:A8:12:4E:E1:6E:6B:A2","sha256":"93:86:43:7A:5E:61:52:4F:74:83:6B:BD:83:4D:F7:53:F9:D4:AE:7F:D1:AD:AB:7E:2D:A9:C6:F3:31:1B:A0:24"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: salecode.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://salecode.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 05:36:57 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EP48nxe2BHaBZ5AQYr2GPPDVYQSoytTIcvLvUwdaQErR4wT32C0QOye3exws5zXXM6LMPWW9hYWrzWSiJGWE3diKYYC3eXFsXrQ47m2P2PLMXFKPMZfKQwaJWWcquA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d84d360a4b3d710308df2279891d0ff7\"\r\ncf-ray: a451d4f42fca7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":972,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b95f20e85587ab8b0ca778a802262635","sha1":"1c04537e86c8e7092023244d5da4a4589366c826","sha256":"dde05e40c73d24590a704bbb00a854c3e09ab3f9484c4baf7b3f3a26fbcd05d1","sha512":"86817008b8552bd7dea9e4fb8b8254b915a4844d66a1202686fbd2f674ba1089c39bf10c8442c5ba694651f149e9a25ef2b64397f63be722f9ecbcf737cfe741","ssdeep":"","tlshash":"55d09565c0ccc616cb0c4d1562053415340fd5c5ddc98524f5a04576d4c6893758634d","first_seen":"2026-10-04T05:32:44.706296Z","last_seen":"2026-10-04T05:37:25.913335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"salecode.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}