If the owner reads this, I'd consider getting codepen.app registered as a public suffix [1].

[1] https://publicsuffix.org/