{"report_id":"619410f9-934a-45d2-9b33-d7224047d106","version":0,"status":"done","tags":[],"date":"2026-06-09T12:41:36Z","url":{"schema":"http","addr":"dydx.coupons","fqdn":"dydx.coupons","domain":"dydx.coupons","tld":"coupons"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cryptocodes.co/","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"title":"Crypto Exchange Referral Codes (June 2026) | CryptoCodes","dom":{"size":195701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"a3d530836ca084a3ce7c2521716db031","sha1":"b010148e21fa6e46a632182d45e11d09848ecaf5","sha256":"7df37eee9a9ae856457cc43748b8f917ac2c5a66445a0c88a68679b80c01e229","sha512":"d2b1c8b24a1cac72b15127a68d30d6f92c8a867fdc4a51468eed213b2339ee3465d00a5ff2a7799dc8a8bd1ce26fdf30012bab2228b379a65ded9b2876be8703","ssdeep":"1536:UOkZUzUhyvCGQfO8H/r5hkJ8QfkqgoYBvPKHC3rX3Vyu9jqzx:UO+nKN0/18g3JKHYrX34ukx","tlshash":"8314f93152442a3d556787e8f5a5f778509a838ac67f5a2ef3ec03710bc9c5aac336c8","dom_hash":"domhash75a8d322552ee2f49901c7cdd49033d8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dydx.coupons","fqdn":"dydx.coupons","domain":"dydx.coupons","tld":"coupons"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T12:41:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dydx.coupons","ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-09T12:41:37.982391Z","last_seen":"2026-06-09T12:41:37.982391Z","alert_count":0,"request_count":1,"received_data":318,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":1,"received_data":15944,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sovjrgvlixirzxghncxt.supabase.co","ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-02T11:43:36.334797Z","last_seen":"2026-06-09T12:40:19.147378Z","alert_count":0,"request_count":3,"received_data":4286,"sent_data":3211,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cryptocodes.co","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-02T11:43:36.333475Z","last_seen":"2026-06-09T12:40:36.411746Z","alert_count":25,"request_count":25,"received_data":1126750,"sent_data":19159,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":4,"received_data":171136,"sent_data":2285,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptocodes.co/~flock.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-29T06:01:48.285519Z","times_seen":12048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/__l5e/events.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb8166e1a6e075468d9dc084e6e0dfd6","sha1":"0161a5dc3e3aaff86cd145677a35a4003f2393d9","sha256":"ce3ea8a5308b2c6a7231124cea3e8a939b99720ca078397376e0728deb723e0a","sha512":"122228a1ad20c01da66e36c5da0d29c377fafdd39a78222438b3a8699fcff4187564c380d741d6795235aed70c1b0e73a1c8923b21d9150c8ddb9a25f14b003d","ssdeep":"768:5+rVEje/DC+qHuk/sk4cx5XlTOmtHSl+Soz/SzcRRTWNJ8X/qpCgAOrtBfOVQfG/:57uk/sk4crryrtBfOV0ovfiU","tlshash":"9603738979f714b30563917e4b9b810232349587314adba4beac4d4a2fcd658e2f3bcd","size":39406,"data":"","first_seen":"2026-06-08T19:00:32.841378Z","last_seen":"2026-06-10T12:39:42.47488Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/index-BtNAWMOH.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"930d9298b32a04bf7102a7befaa7df63","sha1":"ef3aa7aa690824c13f37c46fba774d8210e3565e","sha256":"47a7b8ccf94238d0c2adc534ddfafe2d3f309bd5ad5632f3dbe3be4e53fdac40","sha512":"79d3d06460cd54d2083a82e22d0960ac07eec10f92cf5f48392047da6400a68e1d3be17b9fa4ab466dfe9398084e4adf79f472602a081cbf571f7b9d039bbce2","ssdeep":"6144:xpEYHmj77uTmEuZ3cC1ebwc3HErINpJebszuFLzSmFHVEvcMO9S2/f/ta6DN68Mj:xZFTVabs4SjvcMO9S2/fFRA2S","tlshash":"27d46cd872aaa1620be255e1907f1103f2382916740c8464f66cdeef36f5c49967bfbc","size":615470,"data":"","first_seen":"2026-06-09T12:40:22.919957Z","last_seen":"2026-06-09T12:45:21.543081Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/useQuery-uxRNEmmd.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"88dc01d18324fd8cf257c1c7540c56f6","sha1":"04cddd65b65b73e52f6775e0f3017595d1dbd837","sha256":"855bc0f7bc5b11a08bd0a4657321c8f55cb2dea177b72ee3a74e28d36a49a78d","sha512":"b6d5342b683a2a755d0e68d3b84aca2bf84c8bd6f0a3820c1acc75977b7faccadce31be7747e043c42afbef227aeac30a24e01741e333282f76fd3aeda50428c","ssdeep":"192:fog0ogKfyEy3X0ZCr2dS8U1g+KQawQj3jXN/3s4rRZXN+6ldR18C6O:fo/oxfyEK0ZCZOow7N/3fFZd+6ldR188","tlshash":"9202a4aa7101536335f1c5c49c3a412997247908382ec02cbdbd9ee79663dcaf4bfa39","size":8809,"data":"","first_seen":"2026-06-09T12:40:22.92434Z","last_seen":"2026-06-09T12:45:21.517628Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/exchangeOverrides.functions-NwIuZ9sH.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9262d243b5c76452a9568d0202ba34ad","sha1":"c02759e226281354f6760501b962173090f167a3","sha256":"066db1f802540d7beeac720b93176843d4f0c2405b4b471be26b1d7bd325fb7b","sha512":"3e19c884d4c40d3a588f53900758523e58ae3aeaffc6c0be89fec112c32ef24e81c5ffd918f08eccc5dba2833a5d930abc1cefdb4bd0c30289ea7284ba3e5efe","ssdeep":"","tlshash":"f7f0d45e24d985b0570edecce601201850d79654caff46d09da3035307d105b654f843","size":492,"data":"","first_seen":"2026-06-09T12:40:22.956614Z","last_seen":"2026-06-09T12:45:21.525651Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/index-BXrMK9z3.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"18d43ad0c9629a7f05a451c26da70893","sha1":"49c0efa66d33fe50925d7b7e39865888a8078a30","sha256":"d418e8c7221d9dc766a3de23d3436fff55191f9da494ec4a864eeddbd2b9f6af","sha512":"622f7ef2b4b2b1152a0da5746012ea8a32c3dcf2ba63c38deac3ee5a92e2163a10962a0f3095c9c4a6168e51d4f0a85327171167c38a124253d69a8d776e2091","ssdeep":"192:BwrvG036r74MN+ES8GkiVekjZsI2BMguhQ5EvEDS0h+A:Bae86r74MNTXGkiVeQZ4BMguG5EvE/","tlshash":"91326414e141efada97709e8f59ef008700f4f98c67b89b2e2be742215585967d237c8","size":11332,"data":"","first_seen":"2026-06-09T12:40:22.942495Z","last_seen":"2026-06-09T12:45:21.536943Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/createServerFn-Dux9s8aB.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd61f4a7ca428677d855c7a33bbed3e3","sha1":"274a029742610e7ec44f3e012caf0f991fc05d3f","sha256":"59c432ee0a3255014a195854bc1fe85f6ffe9db0a5cae681199f38a2d6551e65","sha512":"4289b994b8356b63555acc6b94e6822d15cb33453edcd9159cff4c4bacb58769dd72dc0cc57706994990d5ab3b97a30ed2d383b2c8c7f9d73e9550dba41aa6b9","ssdeep":"96:jjLp61+q+Z10horYKyy/ucEXmtgD3YDVG9YoRVgvDP6gfKQna:jjLp5BKoYKyy/uRXmtgERG9YoRVgvDDS","tlshash":"d591dbe438d3f222439e3de540292695fba94616302ed460ff9c5f5f38f5482c76ae54","size":4539,"data":"","first_seen":"2026-06-09T12:40:22.954435Z","last_seen":"2026-06-09T12:45:21.523266Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/auth-middleware-pNbI-okZ.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"682c0d822c578d9174550b6c79429759","sha1":"3171bbf451577ce700ac0b7f0ebcd63b66f2d720","sha256":"b8813b9a8dffcadb8bda41235fdf0dc291706d10250345bd234b8ce126f4f45a","sha512":"d79973b0204c5249661be0e5212f6959ae132972cf7b290a15186ec012d2079213965793bc938282bb7f32ded1c16b7c28b6af8a158335eccddf4f17b8a53557","ssdeep":"","tlshash":"30a0120a080003f1450408cc43150c110171542db30149505915425a1f6288b403dd05","size":85,"data":"","first_seen":"2026-06-09T12:40:22.951626Z","last_seen":"2026-06-09T12:45:21.533552Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/SiteFooter-BsUotn1Y.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ef9bf8c0e6f731c521d27443bd5ff73","sha1":"175a0911e91b1914952b72a7ffe968c9900de7ba","sha256":"17f33ca0f77e9925dd1195a5931d730796be75b97b35c7242bf22cdba545c813","sha512":"df9063dd7d9138473967977f29a33de83ab4489d354122e5d299d34e8b72975c49c557bd0ef792634c3b09c20bd73686c943b37e1e6ee00250365a94e04aca0e","ssdeep":"768:Hlmqbu9YrO/3Fgmhrwwq4/rYS5zf71WpHc7peCR3ZqkV0mBHPl3dBkv5ckWFHBFf:Aqbu9YKfFQf4/rbY/CR3MkV0iPXBkRb8","tlshash":"b733cf3011423e7e3ed32ec86065d5443c1f4edbc6a4e537b7ac9106a6989253b6aae8","size":51409,"data":"","first_seen":"2026-06-09T12:40:22.949762Z","last_seen":"2026-06-09T12:45:21.537637Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/useExchanges-BTZj7z5C.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2eeaa9f4bab0de8745f3c3a60974216","sha1":"d5e5727d987ccf330ae8885490862714a86f30c8","sha256":"b905e48352ed293f4ac27dbede779405bca7b6c45883d2986a3d2c817320f99f","sha512":"e4bcf242d415df6422197aa2f68b8094e38f41d3e99f18602a6256bb84bc6c3fc77a770c0cc99021267f746b35c6c9a3b5c9e9461a6b54da13b916fb97360622","ssdeep":"","tlshash":"fc61b54df78a243e4764c4ccaa9b7055ddbc1678b1968482e2ad4e6f7b220429673f48","size":3389,"data":"","first_seen":"2026-06-09T12:40:22.922094Z","last_seen":"2026-06-09T12:45:21.545722Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sovjrgvlixirzxghncxt.supabase.co/rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29","fqdn":"sovjrgvlixirzxghncxt.supabase.co","domain":"sovjrgvlixirzxghncxt.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.966Z","timestamp":1781008864966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"GET /rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29 HTTP/1.1\r\nHost: sovjrgvlixirzxghncxt.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InNvdmpyZ3ZsaXhpcnp4Z2huY3h0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODAzNDE1NTUsImV4cCI6MjA5NTkxNzU1NX0.9OjvpoeTgEBm4WjJbH4hJ59Mb-LwYiobLf91qV4SISs\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InNvdmpyZ3ZsaXhpcnp4Z2huY3h0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODAzNDE1NTUsImV4cCI6MjA5NTkxNzU1NX0.9OjvpoeTgEBm4WjJbH4hJ59Mb-LwYiobLf91qV4SISs\r\nx-client-info: supabase-js-web/2.106.2\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: 0-18/*\r\ncf-ray: a090355e4f130b69-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://cryptocodes.co\r\ncontent-encoding: gzip\r\ncontent-location: /exchange_clicks?exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29\u0026select=exchange_slug%2Cused_count\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: sovjrgvlixirzxghncxt\r\nsb-request-id: 019eac66-96f1-7872-9091-5821601ebbe6\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 1\r\nset-cookie: __cf_bm=J.W91wVsJp2jNvejt8DA6eeGAzP5HCosCS0dcdgVT5A-1781008865.0050602-1.0.1.1-Uzbpa2JzjG4HmvJBD4k4WfZnIOWCMOWaKWKtpnRnrAxwug4sJf1WkptNa3hDr5UWLyq.H4d4fo28UBZ5jAmGRx9Xb8bBNycs8AIEIj3YrkyiUjkeqB_WiJiGPLCBHclw; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Tue, 09 Jun 2026 13:11:05 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":851,"size_decoded":1710,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d428fc74ef72325c82a85650b4b224e","sha1":"a9d31007dbcb6fd06e9cbc7ee383c539f1d4c341","sha256":"ce3cd3e644468e4e82e332caf16b8b05c2e77a78e50b4b7957371c2a35701866","sha512":"d53e5d421de3e214e81fcc1ddab5247f971cbb8338e6835e4252c1d8cae4ea10669b0846bbb476efd0830320ba5212e87049f175f3e843d6508ab889330eab9e","ssdeep":"","tlshash":"68012d289590393adfce1d73fce520b3986e0ea790b8d2ad83bcdc510c45d68047b990","first_seen":"2026-06-09T12:40:22.945625Z","last_seen":"2026-06-09T12:41:42.469022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sovjrgvlixirzxghncxt.supabase.co/rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29","fqdn":"sovjrgvlixirzxghncxt.supabase.co","domain":"sovjrgvlixirzxghncxt.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.969Z","timestamp":1781008864969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"OPTIONS /rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29 HTTP/1.1\r\nHost: sovjrgvlixirzxghncxt.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://cryptocodes.co/\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: sovjrgvlixirzxghncxt\r\nsb-request-id: 019eac66-96da-7962-864a-8bec32f708c3\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=IH2edF8D7mZ_XuTS3wr3w5_pou2KJnR8bLBaL1_OQu8-1781008864.9794824-1.0.1.1-wz3TjVHTpicCEGPEJjOm9wleOeD0qHjf38txetJCBnaf_wnJscPSkcR2tqa3bw9SQtfzEcjq8CtE34UoX9W7WrsLJKAiM.TvpHV5JKbQUxtSmarWOdcnJUzQRxiMfetU; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Tue, 09 Jun 2026 13:11:04 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a090355e1ef20b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":964,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T07:32:21.585315Z","times_seen":16818461,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/createServerFn-Dux9s8aB.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.352Z","timestamp":1781008864352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/createServerFn-Dux9s8aB.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a2c1056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4539,"size_decoded":2424,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4538)","md5":"cd61f4a7ca428677d855c7a33bbed3e3","sha1":"274a029742610e7ec44f3e012caf0f991fc05d3f","sha256":"59c432ee0a3255014a195854bc1fe85f6ffe9db0a5cae681199f38a2d6551e65","sha512":"4289b994b8356b63555acc6b94e6822d15cb33453edcd9159cff4c4bacb58769dd72dc0cc57706994990d5ab3b97a30ed2d383b2c8c7f9d73e9550dba41aa6b9","ssdeep":"96:jjLp61+q+Z10horYKyy/ucEXmtgD3YDVG9YoRVgvDP6gfKQna:jjLp5BKoYKyy/uRXmtgERG9YoRVgvDDS","tlshash":"d591dbe438d3f222439e3de540292695fba94616302ed460ff9c5f5f38f5482c76ae54","first_seen":"2026-06-09T12:40:22.954435Z","last_seen":"2026-06-09T12:45:21.523266Z","times_seen":7,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/auth-middleware-pNbI-okZ.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.360Z","timestamp":1781008864360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/auth-middleware-pNbI-okZ.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a3c1f56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85,"size_decoded":574,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"682c0d822c578d9174550b6c79429759","sha1":"3171bbf451577ce700ac0b7f0ebcd63b66f2d720","sha256":"b8813b9a8dffcadb8bda41235fdf0dc291706d10250345bd234b8ce126f4f45a","sha512":"d79973b0204c5249661be0e5212f6959ae132972cf7b290a15186ec012d2079213965793bc938282bb7f32ded1c16b7c28b6af8a158335eccddf4f17b8a53557","ssdeep":"","tlshash":"30a0120a080003f1450408cc43150c110171542db30149505915425a1f6288b403dd05","first_seen":"2026-06-09T12:40:22.951626Z","last_seen":"2026-06-09T12:45:21.533552Z","times_seen":7,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/~flock.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.363Z","timestamp":1781008864363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a3c2456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-29T06:01:48.285519Z","times_seen":12048,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/orangex-CLNYZHgg.png","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:05.137Z","timestamp":1781008865137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/orangex-CLNYZHgg.png HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 14979\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355f1a5856aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14979,"size_decoded":15431,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"5e95d2074382329aea77e65551f9b050","sha1":"0b879b4ec93ceab75781fae1e3ce20425916a4fc","sha256":"6e3667c05a0580462be27f587e9add83541ad638a126bc4d57e3a7b2233b136b","sha512":"47c1ab39355d05e021ae76e678655d4cc26d1055ab575289d2b6bbaef36dd1ae06cbd83c1b07c2d5cec7e7155dd6abdb561736540850122a81f37d25c4202bf5","ssdeep":"384:u9LJfqMlDpHoSyoE3RNF0cbr5YeJRGduRcOylMW:u1JCMlDBoSErecPtIdAwMW","tlshash":"5062c06a48735c310dcdd586b30f112a9eaa1e52f40c4fde7622aed5c9d3f1f09a46c1","first_seen":"2026-06-04T13:15:52.892473Z","last_seen":"2026-06-09T12:45:21.530812Z","times_seen":9,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/api/public/presence","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:25.032Z","timestamp":1781008885032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /api/public/presence HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a09035db692556aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"dfae779caae258d345d626669c2afa72","sha1":"f3495cd1883fac3768e749b254b337e8a99003e6","sha256":"286ef99473842386e093b70e2cb43524734dcd35c826f5b736d6444f65ad4686","sha512":"fa6e6d35ba1062cc07e98dbe9674a79ae330d6f8f2eca29af4bd550f49100255b9ba17300101184813885fbdf58c1845e9e4564a190900ae34b4be9df86d22ca","ssdeep":"","tlshash":"ac5000003000000c0c0c0000f0003030c0000000000003c300c000000300c0c0000300","first_seen":"2023-09-11T06:10:54Z","last_seen":"2026-06-29T03:59:57.761567Z","times_seen":166,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.593Z","timestamp":1781008864593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T07:31:35.485036Z","times_seen":221908,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":24,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/apple-touch-icon.png","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.703Z","timestamp":1781008864703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 14946\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355c5ebb56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14946,"size_decoded":15346,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 16-bit/color RGBA, non-interlaced","md5":"b4f70a6a7b989952e127054ba169c09d","sha1":"cce4fbb35ca9dc825608e3129b0a152db3a324b1","sha256":"f3667579fcc1ed53a8d581600efbaf15268c5fe85bb610b51a7a6c9087e13b8f","sha512":"cdba341f02a64db41f18088251fbd0fa80ed8b70596ba16d3664fec8025b5d71843f01a56b59bedbe5d3436287467883c477c56bc458deee0710c3253e5cc899","ssdeep":"384:WlCMN60Y4f42jKwyGLmeFKgaGIB28f6Uxca/IsfxYtf:kCKlY6HyGNGB28fYWIttf","tlshash":"c562d02e30326a65f9196554e7d33b06789db6c6faf6c680743ac4b01ebe757c70ca00","first_seen":"2026-06-02T11:43:41.695904Z","last_seen":"2026-06-09T12:45:21.54003Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sovjrgvlixirzxghncxt.supabase.co/rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29","fqdn":"sovjrgvlixirzxghncxt.supabase.co","domain":"sovjrgvlixirzxghncxt.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:20.038Z","timestamp":1781008880038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Apr 2026 07:48:36 GMT","end":"Wed, 29 Jul 2026 08:48:34 GMT"},"fingerprint":{"sha1":"CA:A1:55:FA:10:0A:42:25:AC:57:D5:30:F6:D2:6F:06:35:61:90:C0","sha256":"B9:B8:F4:CE:6C:86:1D:3D:D1:67:87:08:FA:4A:40:62:10:7E:E7:05:0B:52:82:0F:99:10:50:F1:2E:B2:91:00"}}},"request":{"raw":"OPTIONS /rest/v1/exchange_clicks?select=exchange_slug%2Cused_count\u0026exchange_slug=in.%28okx%2Ckraken%2Cbybit%2Cbybit-eu%2Ccoinbase%2Ckucoin%2Cgate%2Chyperliquid%2Caster%2Cgodark%2Capex-omni%2Cbitget%2Cbingx%2Cbinance%2Cwhitebit%2Cmexc%2Ccrypto-com%2Cdydx%2Cbitunix%2Cbitmart%2Cweex%2Ctoobit%2Courbit%2Ckcex%2Ctapbit%2Clbank%2Cbtse%2Cxt%2Corangex%2Chtx%29 HTTP/1.1\r\nHost: sovjrgvlixirzxghncxt.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://cryptocodes.co/\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 09 Jun 2026 12:41:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: sovjrgvlixirzxghncxt\r\nsb-request-id: 019eac66-d1a9-738e-b2e4-7ed35415ac26\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: __cf_bm=NQU1nUWAtZGi_DddgcnTnBH45eG8jFdGbHBDxAzsUKQ-1781008880.0361457-1.0.1.1-vtnMv6vuy1m1YbfY89JBUckTj4ekGFxRJ3SFy.Ct_OaXV5xk0FO0thRQVOV1aYE9zSq3v5tWwRal0mTCUvZYuhgM1lBDU3XTjSDygkOGRHerGnqGCze7yMxi1o3x1DMC; HttpOnly; SameSite=None; Secure; Path=/; Domain=supabase.co; Expires=Tue, 09 Jun 2026 13:11:20 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a09035bc3b450b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":964,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T07:32:21.585315Z","times_seen":16818461,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/index-BtNAWMOH.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.343Z","timestamp":1781008864343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/index-BtNAWMOH.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a2c0256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615470,"size_decoded":179546,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42527)","md5":"930d9298b32a04bf7102a7befaa7df63","sha1":"ef3aa7aa690824c13f37c46fba774d8210e3565e","sha256":"47a7b8ccf94238d0c2adc534ddfafe2d3f309bd5ad5632f3dbe3be4e53fdac40","sha512":"79d3d06460cd54d2083a82e22d0960ac07eec10f92cf5f48392047da6400a68e1d3be17b9fa4ab466dfe9398084e4adf79f472602a081cbf571f7b9d039bbce2","ssdeep":"6144:xpEYHmj77uTmEuZ3cC1ebwc3HErINpJebszuFLzSmFHVEvcMO9S2/f/ta6DN68Mj:xZFTVabs4SjvcMO9S2/fFRA2S","tlshash":"27d46cd872aaa1620be255e1907f1103f2382916740c8464f66cdeef36f5c49967bfbc","first_seen":"2026-06-09T12:40:22.919957Z","last_seen":"2026-06-09T12:45:21.543081Z","times_seen":7,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.601Z","timestamp":1781008864601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 07 Jun 2026 10:36:54 GMT\r\nexpires: Mon, 07 Jun 2027 10:36:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 180250\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-29T06:31:06.879176Z","times_seen":20781,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/xt-BdJVlZF7.png","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:05.138Z","timestamp":1781008865138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/xt-BdJVlZF7.png HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 12458\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355f1a5a56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12458,"size_decoded":12910,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5833e1a4221b146a29c8ce2694aceb78","sha1":"f7fb244415b45ddf4387a8995e27bfc9e09fb937","sha256":"805652ac82f993bec57a77e27bf047c9bf721f19b80e2524d1432ba2c276a515","sha512":"34f1126aea7cebc21ea0a54320cd5733791c504bbc2d586dd9064c9649d92d4837e948292ba410722aadc5c69ac5a6a156312bbbe60a84f3ae1f69c9fcec540c","ssdeep":"384:irX0yA6ggPAjfMkBtZb7qafJguqLN3+Xmo:uX0yAyPAftZnqafg3+XZ","tlshash":"9942d00d63d7923da407afb9196d85ec06acc1f16d793cb8e28d4b2d19411cb10c3695","first_seen":"2026-06-02T11:43:41.698038Z","last_seen":"2026-06-09T12:45:21.544799Z","times_seen":10,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydx.coupons/","fqdn":"dydx.coupons","domain":"dydx.coupons","tld":"coupons"},"ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T12:41:02.336Z","timestamp":1781008862336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydx.coupons","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 20:03:22 GMT","end":"Sun, 06 Sep 2026 20:03:21 GMT"},"fingerprint":{"sha1":"37:51:0E:6C:CA:BF:0C:57:C2:FA:55:15:D0:D8:18:A7:69:4D:4A:51","sha256":"47:86:55:CB:08:43:FF:A3:DB:EB:6F:8A:54:35:A9:BD:95:FD:B5:87:2A:55:F9:17:C9:C3:71:7C:EF:99:70:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dydx.coupons\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Tue, 09 Jun 2026 12:41:03 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\ncache-control: private, no-cache, no-store, max-age=0\r\nexpires: Mon, 01 Jan 1990 0:00:00 GMT\r\nlocation: https://cryptocodes.co\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T07:32:21.585315Z","times_seen":16818461,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":244,"connect":153,"send":0,"wait":191,"receive":0,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/index-BXrMK9z3.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.345Z","timestamp":1781008864345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/index-BXrMK9z3.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a2c0456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11332,"size_decoded":3808,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11325)","md5":"18d43ad0c9629a7f05a451c26da70893","sha1":"49c0efa66d33fe50925d7b7e39865888a8078a30","sha256":"d418e8c7221d9dc766a3de23d3436fff55191f9da494ec4a864eeddbd2b9f6af","sha512":"622f7ef2b4b2b1152a0da5746012ea8a32c3dcf2ba63c38deac3ee5a92e2163a10962a0f3095c9c4a6168e51d4f0a85327171167c38a124253d69a8d776e2091","ssdeep":"192:BwrvG036r74MN+ES8GkiVekjZsI2BMguhQ5EvEDS0h+A:Bae86r74MNTXGkiVeQZ4BMguG5EvE/","tlshash":"91326414e141efada97709e8f59ef008700f4f98c67b89b2e2be742215585967d237c8","first_seen":"2026-06-09T12:40:22.942495Z","last_seen":"2026-06-09T12:45:21.536943Z","times_seen":7,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/__l5e/events.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.365Z","timestamp":1781008864365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a4c2656aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39406,"size_decoded":9085,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (354)","md5":"fb8166e1a6e075468d9dc084e6e0dfd6","sha1":"0161a5dc3e3aaff86cd145677a35a4003f2393d9","sha256":"ce3ea8a5308b2c6a7231124cea3e8a939b99720ca078397376e0728deb723e0a","sha512":"122228a1ad20c01da66e36c5da0d29c377fafdd39a78222438b3a8699fcff4187564c380d741d6795235aed70c1b0e73a1c8923b21d9150c8ddb9a25f14b003d","ssdeep":"768:5+rVEje/DC+qHuk/sk4cx5XlTOmtHSl+Soz/SzcRRTWNJ8X/qpCgAOrtBfOVQfG/:57uk/sk4crryrtBfOV0ovfiU","tlshash":"9603738979f714b30563917e4b9b810232349587314adba4beac4d4a2fcd658e2f3bcd","first_seen":"2026-06-08T19:00:32.841378Z","last_seen":"2026-06-10T12:39:42.47488Z","times_seen":124,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.598Z","timestamp":1781008864598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T07:31:35.485036Z","times_seen":221908,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":37,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/~api/analytics","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.963Z","timestamp":1781008864963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nContent-Type: application/json\r\nContent-Length: 335\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a090355df8fc56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":333,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-29T06:01:48.269079Z","times_seen":12056,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T12:41:03.249Z","timestamp":1781008863249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocodes.co; Expires=Tue, 09 Jun 2026 13:11:03 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a09035536d2256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197771,"size_decoded":45618,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"ea6ee11acdb76986ed36c8903318b540","sha1":"3cc6e71579bda5a9ac29169de986fc90d62a8279","sha256":"6bc76c68c854f296040dd754418a8a8aec0790cb817936054438d57fd3e46294","sha512":"c7efb7a21bd275dd5588595ccfa7299f31b6d24d243a2c2e947da0c95056980570493bd86c0f7430f50b73cb05d677d28d02bff9d6f0d884687f11d6ce740f52","ssdeep":"1536:b2T3r+y7yWC7Qf2DDC0rrQfP3uBu9vqrps/r45+WGB3OP7kmx2:b2D7n+xprrA3yuYq/s+1IJx2","tlshash":"a214f83152441a3d556787e8f5a5f378509a838ac67f8a2ef3ec03750bc9c5aac336d8","first_seen":"2026-06-09T12:41:42.484006Z","last_seen":"2026-06-09T12:41:42.484006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":604,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.334Z","timestamp":1781008864334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;600;700\u0026family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Jun 2026 12:41:04 GMT\r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15260,"size_decoded":1584,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0fcfd0f1f36fbfe1e055958b8936aee5","sha1":"bc7a7d53455e16f8639814acab8239ffd2115357","sha256":"d19eeddda67a658e6c21816ebfe8c01b570466a5ec020055df0d003d7eb0a5ca","sha512":"80ef948e93c055cb21e06f83370d7696ee3f52244913c6569466bcc584a43eab3464a01d3d052659d8ab47d7897a22b8ab5a9fd09bb2b009b342ca5288232f9c","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGqx/GiZC4GRZfRG4ZYiGu:vXuM0p2+/DgRt","tlshash":"6b62cb92002ba500eb971cc223ce7e3abe8e60856085d6796ffd1cc99cded62436472d","first_seen":"2025-09-12T10:14:26.588684Z","last_seen":"2026-06-27T02:22:38.587903Z","times_seen":102,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/styles-B6ELr9td.css","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.341Z","timestamp":1781008864341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/styles-B6ELr9td.css HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a1c0056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83156,"size_decoded":14299,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f8a228d4976ccefb0b10ea642ec127f","sha1":"04cdf5ebd622dcc3d73dbc34c442dfb3c332db2a","sha256":"cb3aa20722023c8eae30ae5eb09c18cb610247daebaaed96dfe29edb53c056c9","sha512":"22190db43942db036922efd826d6570e229e6658b212fee20b76a29efa290777ab8fd95c6054741586725dd11e23dd8c5e641512394354195658fe2d502f4104","ssdeep":"1536:b9QzAC+MTh+jtVayZEBES6b2Qi/jahSsMq+WDhXX7ovLuu/n988R988q:BQzAC+MTh+jbayeES6b2QEiMq+WDhuLS","tlshash":"9a83a494b229e53fbc3774f9938cb84c9109b0c0dd7546edfa16a12216c7bf1ada6218","first_seen":"2026-06-09T12:40:22.917589Z","last_seen":"2026-06-09T12:45:21.516721Z","times_seen":7,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/useExchanges-BTZj7z5C.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.350Z","timestamp":1781008864350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/useExchanges-BTZj7z5C.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a2c0e56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3389,"size_decoded":2275,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3388)","md5":"f2eeaa9f4bab0de8745f3c3a60974216","sha1":"d5e5727d987ccf330ae8885490862714a86f30c8","sha256":"b905e48352ed293f4ac27dbede779405bca7b6c45883d2986a3d2c817320f99f","sha512":"e4bcf242d415df6422197aa2f68b8094e38f41d3e99f18602a6256bb84bc6c3fc77a770c0cc99021267f746b35c6c9a3b5c9e9461a6b54da13b916fb97360622","ssdeep":"","tlshash":"fc61b54df78a243e4764c4ccaa9b7055ddbc1678b1968482e2ad4e6f7b220429673f48","first_seen":"2026-06-09T12:40:22.922094Z","last_seen":"2026-06-09T12:45:21.545722Z","times_seen":7,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/exchangeOverrides.functions-NwIuZ9sH.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.357Z","timestamp":1781008864357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/exchangeOverrides.functions-NwIuZ9sH.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a3c1c56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492,"size_decoded":809,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (491)","md5":"9262d243b5c76452a9568d0202ba34ad","sha1":"c02759e226281354f6760501b962173090f167a3","sha256":"066db1f802540d7beeac720b93176843d4f0c2405b4b471be26b1d7bd325fb7b","sha512":"3e19c884d4c40d3a588f53900758523e58ae3aeaffc6c0be89fec112c32ef24e81c5ffd918f08eccc5dba2833a5d930abc1cefdb4bd0c30289ea7284ba3e5efe","ssdeep":"","tlshash":"f7f0d45e24d985b0570edecce601201850d79654caff46d09da3035307d105b654f843","first_seen":"2026-06-09T12:40:22.956614Z","last_seen":"2026-06-09T12:45:21.525651Z","times_seen":7,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/api/public/presence","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:05.766Z","timestamp":1781008865766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /api/public/presence HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a09035630edd56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"dfae779caae258d345d626669c2afa72","sha1":"f3495cd1883fac3768e749b254b337e8a99003e6","sha256":"286ef99473842386e093b70e2cb43524734dcd35c826f5b736d6444f65ad4686","sha512":"fa6e6d35ba1062cc07e98dbe9674a79ae330d6f8f2eca29af4bd550f49100255b9ba17300101184813885fbdf58c1845e9e4564a190900ae34b4be9df86d22ca","ssdeep":"","tlshash":"ac5000003000000c0c0c0000f0003030c0000000000003c300c000000300c0c0000300","first_seen":"2023-09-11T06:10:54Z","last_seen":"2026-06-29T03:59:57.761567Z","times_seen":166,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/useQuery-uxRNEmmd.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.354Z","timestamp":1781008864354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/useQuery-uxRNEmmd.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a3c1556aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8809,"size_decoded":3674,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8808)","md5":"88dc01d18324fd8cf257c1c7540c56f6","sha1":"04cddd65b65b73e52f6775e0f3017595d1dbd837","sha256":"855bc0f7bc5b11a08bd0a4657321c8f55cb2dea177b72ee3a74e28d36a49a78d","sha512":"b6d5342b683a2a755d0e68d3b84aca2bf84c8bd6f0a3820c1acc75977b7faccadce31be7747e043c42afbef227aeac30a24e01741e333282f76fd3aeda50428c","ssdeep":"192:fog0ogKfyEy3X0ZCr2dS8U1g+KQawQj3jXN/3s4rRZXN+6ldR18C6O:fo/oxfyEK0ZCZOow7N/3fFZd+6ldR188","tlshash":"9202a4aa7101536335f1c5c49c3a412997247908382ec02cbdbd9ee79663dcaf4bfa39","first_seen":"2026-06-09T12:40:22.92434Z","last_seen":"2026-06-09T12:45:21.517628Z","times_seen":7,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/api/public/presence","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.945Z","timestamp":1781008864945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"POST /api/public/presence HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nContent-Type: application/json\r\nContent-Length: 75\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355de8cf56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-06-29T06:38:45.974752Z","times_seen":13370,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/api/public/presence","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:07.446Z","timestamp":1781008867446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /api/public/presence HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090356d8b2056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"dfae779caae258d345d626669c2afa72","sha1":"f3495cd1883fac3768e749b254b337e8a99003e6","sha256":"286ef99473842386e093b70e2cb43524734dcd35c826f5b736d6444f65ad4686","sha512":"fa6e6d35ba1062cc07e98dbe9674a79ae330d6f8f2eca29af4bd550f49100255b9ba17300101184813885fbdf58c1845e9e4564a190900ae34b4be9df86d22ca","ssdeep":"","tlshash":"ac5000003000000c0c0c0000f0003030c0000000000003c300c000000300c0c0000300","first_seen":"2023-09-11T06:10:54Z","last_seen":"2026-06-29T03:59:57.761567Z","times_seen":166,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/SiteFooter-BsUotn1Y.js","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.348Z","timestamp":1781008864348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/SiteFooter-BsUotn1Y.js HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355a2c0a56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51409,"size_decoded":35248,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (51407)","md5":"6ef9bf8c0e6f731c521d27443bd5ff73","sha1":"175a0911e91b1914952b72a7ffe968c9900de7ba","sha256":"17f33ca0f77e9925dd1195a5931d730796be75b97b35c7242bf22cdba545c813","sha512":"df9063dd7d9138473967977f29a33de83ab4489d354122e5d299d34e8b72975c49c557bd0ef792634c3b09c20bd73686c943b37e1e6ee00250365a94e04aca0e","ssdeep":"768:Hlmqbu9YrO/3Fgmhrwwq4/rYS5zf71WpHc7peCR3ZqkV0mBHPl3dBkv5ckWFHBFf:Aqbu9YKfFQf4/rbY/CR3MkV0iPXBkRb8","tlshash":"b733cf3011423e7e3ed32ec86065d5443c1f4edbc6a4e537b7ac9106a6989253b6aae8","first_seen":"2026-06-09T12:40:22.949762Z","last_seen":"2026-06-09T12:45:21.537637Z","times_seen":7,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.595Z","timestamp":1781008864595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:46:47 GMT\r\nexpires: Fri, 04 Jun 2027 01:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T07:31:35.485036Z","times_seen":221908,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":30,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/assets/godark-BkTsfG6o.png","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:05.141Z","timestamp":1781008865141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /assets/godark-BkTsfG6o.png HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY; session-id=3837c50f-9da7-4730-bbd1-a5909b32ab80\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 35057\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355f1a6056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35057,"size_decoded":35509,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"53c4d17ee6b6a62dad4c9c0c469897df","sha1":"d44cdf3d595a92e51dc0b478915522ad734f2578","sha256":"83614a99c4fe6e232e271d6434c1dea1493d6d6c5a8f8d20998cb5a567432d00","sha512":"9aad1a83c7149fc6e99e1e096447046406a0fdd55c816bbe3a2a81f42b5c0e3650b454e14e515f556a53b3bd403d616f5d1fe25468cb7d8f237a7b6fa565f15d","ssdeep":"768:pEyYZaf0dg16LlugUY0/2VPdGzp/YPHeuUFyDfaPbLywUJP+fw9sicl5:pEdQf0WALlpUreV12pAP4Fc8bUZPqV5","tlshash":"2cf2f2b620463c82c5d19a8e9d718603132d2447353ffde0dba9aa5a1e5a3f7875cc89","first_seen":"2026-06-02T11:43:41.689403Z","last_seen":"2026-06-09T12:45:21.5222Z","times_seen":10,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/favicon.svg","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.705Z","timestamp":1781008864705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:04 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355c6ebc56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":389,"size_decoded":690,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"098ecd4dc2fa7a833ffef827b6ef11d8","sha1":"8b0571d7290a03a13741005bd960608783c73a85","sha256":"ce68359bc89a670cb2c27a481fbf5431ee2320d13fa720b31e33fbeb6871a950","sha512":"8a8ff1d140b593e6df461b57a6130da78b20a8e5fc4c95d460534d1d8d7571450e6e0270f274c6ff6d1fce0eb13e55d8f33eaf529cd69225dedb32680393f6d5","ssdeep":"","tlshash":"09e0f101814c4300c54c8f0cab0772240017b4ca81c18590f1ecaa19078948796d135c","first_seen":"2026-06-02T11:43:41.694919Z","last_seen":"2026-06-09T12:45:21.520069Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/__l5e/trackevents","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.915Z","timestamp":1781008864915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nContent-Type: application/json\r\nContent-Length: 2490\r\nOrigin: https://cryptocodes.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a090355db88556aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-06-29T06:01:48.29479Z","times_seen":2252,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/api/public/presence","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.947Z","timestamp":1781008864947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /api/public/presence HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nserver: cloudflare\r\ncf-ray: a090355de8d256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":440,"mime_type":"application/json","magic":"JSON text data","md5":"436f4952685a18341d47e423c6533cd1","sha1":"2d8428ec2f827e7da12cbbe2d8d2313d92b9ec90","sha256":"b0beaf5a3dbe82ae841ac88bdc3b1174d7e4dec57454b6539e556e58eaadc600","sha512":"4935bc7db58a7815e9701a539457e09569b0acb503645a982290177f41fe103beed433821ee78f7c2a3ceefd4e0f911d48f4dbc97aef9a42d47e89d8d3e3a8de","ssdeep":"","tlshash":"7f5000003000000c0ccc0000f0003c30c00000000000030300c000000300c3c0000000","first_seen":"2023-12-05T18:34:02Z","last_seen":"2026-06-29T07:32:50.338426Z","times_seen":194,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocodes.co/_serverFn/05bf8772882189b0bddb6e2c4322983965cfc589218ffa5413a43c71474059c3","fqdn":"cryptocodes.co","domain":"cryptocodes.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocodes.co/","date":"2026-06-09T12:41:04.958Z","timestamp":1781008864958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocodes.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Jun 2026 23:29:02 GMT","end":"Mon, 31 Aug 2026 00:29:01 GMT"},"fingerprint":{"sha1":"81:AE:66:A4:7D:55:7F:D0:6B:FB:A6:D3:D4:25:52:1A:C0:80:5C:60","sha256":"21:6D:17:60:AF:40:B7:F1:FC:B4:75:D6:67:CF:45:49:7C:B6:54:3D:06:E2:9A:5D:9C:17:FD:78:CB:A7:06:6D"}}},"request":{"raw":"GET /_serverFn/05bf8772882189b0bddb6e2c4322983965cfc589218ffa5413a43c71474059c3 HTTP/1.1\r\nHost: cryptocodes.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptocodes.co/\r\nx-tsr-serverfn: true\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da; __cf_bm=9J1hh0K2KDh2GFwm2Db1MZkxd_gSobOrAnzeJ7WWqb8-1781008863.266174-1.0.1.1-Bj5laakTfRfwrVGeITcWbmB0gKNRZ2x2ryNEWD_Z5Fjep6YBqvsq5Waj05vFhK4PtLpZFEoLl_F7ZV00W4nxcFgmKI78de0xdccK4r0xJpexGnw9YV4JBrqZ8SPJ91YY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 09 Jun 2026 12:41:05 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: fa2ada34d0d59e44ddf4ed028bb7d1e84fbbe4e1ac1523a2e803c0d7533f60da\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a090355df8f056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":676,"mime_type":"application/json","magic":"JSON text data","md5":"9c61608bcc68fde6ce0783360eddaf93","sha1":"c91513445fe7d49392f4bd9fc8973748a4e4de97","sha256":"2e5a27346379f1da0ce9a9c12239c645dafee08fa55deb398b0f817d5c6d0b12","sha512":"8cc19281016e15df1fd4c7fb5d7b8653b34a6b5825e977a88f7b22a243ceae00168fd9b5bc3bf67d34a5ea90d0b69d9c782828c2fb4fb0f5aebadb8b5b27b21e","ssdeep":"","tlshash":"46e0927d0d1b683eb985fd40d8e7b047c9c212da4fe582d4c65d5a5c12c13161b11b71","first_seen":"2026-06-09T12:40:22.937666Z","last_seen":"2026-06-09T12:45:21.513164Z","times_seen":7,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"cryptocodes.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}