{"report_id":"51c131e1-b540-40ba-86ea-f7dec9e3135c","version":0,"status":"done","tags":[],"date":"2026-08-04T09:38:07Z","url":{"schema":"http","addr":"coldcard.online/","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":0,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"coldcard.online/","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"title":"COLDCARD - Secure Your Bitcoin","dom":{"size":18995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1045dc723eb7920559887fb903320b90","sha1":"2aab33ea9e6f3c6edd810a259899598a4cce45e1","sha256":"856efa2f5f2e3130896924e1f3f87c21ce3f68ed529135ff4a4f9da7e8d2497b","sha512":"a2e884d9ae5837a1c01ea4bddf8e195d723ec28c113a2845d72d744c5aaacb36a6a4ff83fb1ab05d0233cff7ba6471fbda6ac80bff1682171f975cb0d41472ca","ssdeep":"192:Brj0FFH2rsfM1FG2HGmdgqlOF5UPQ5W899mGlagH7uwHcSO6UI8Mklt9LU22BHmh:Brj+FoFN3YXYSJtlk5Lp2pk14dO/ZR3D","tlshash":"1182748aaaf310266913a57d2beb17193231d003d50ace593e9c5348cfc5b999e73bcc","dom_hash":"domhash2f1fd2363ed997cdba5ac7f54ddd7532","first_seen":"2026-08-04T09:33:43.791586Z","last_seen":"2026-08-04T09:38:08.5151Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coldcard.online/","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":0,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T09:38:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"coldcard.online","ip":{"addr":"45.67.84.129","port":443,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-08-02","domain_rank":0,"first_seen":"2026-08-04T09:33:38.076994Z","last_seen":"2026-08-04T09:33:38.076994Z","alert_count":0,"request_count":3,"received_data":416064,"sent_data":1510,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coldcard.online/","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":443,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"243e6d74eed0bdc865ce00e1a4a9d7d8","sha1":"5e467e2d9aaec55e2b30643c3a9ec833b8d71cd0","sha256":"108969eb3470514e10ffb310c5f4826ece8fc5ff914c9fa5c9fdba225511f4a6","sha512":"2823795b513ab72bc3ee96b956c63bbc10fe27ce1a0538ccd835a9192192de8fea03ff97ccf3363fc9a6b099a758da28e152c1dbb2b5e39fc993fa57e8924afd","ssdeep":"96:OOkmFP6MiWTN9TM5+SJEONYqdofzh3n7ZZqYb3zsQJvxtYaI:OHmFP6MiWx9AoLCdo7dZZR3z/98aI","tlshash":"84b12c7ab9f2183546ab75bf63eb6284343190133800ea453d6c87094fe1fa89633bd8","size":5297,"data":"","first_seen":"2026-08-04T09:33:43.806528Z","last_seen":"2026-08-04T09:38:08.526515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coldcard.online/","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":443,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T09:37:40.518Z","timestamp":1785836260518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcard.online","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 18:22:21 GMT","end":"Sat, 31 Oct 2026 18:22:20 GMT"},"fingerprint":{"sha1":"E3:B7:BC:69:5E:24:AF:F5:CC:9D:76:23:B8:C0:A2:37:71:D3:1A:D0","sha256":"20:8C:FA:64:57:A1:D0:7E:F6:14:57:51:1D:9C:84:DB:9B:80:5C:5E:EF:5E:7B:A7:4B:60:38:77:64:40:BF:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coldcard.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 04 Aug 2026 09:37:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 03 Aug 2026 15:13:45 GMT\r\nETag: W/\"4d09-19fc830226b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19721,"size_decoded":6427,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c3035647a1404cb0e67193253056a91e","sha1":"2e3f635bb3f8ff1a1850120e8a67268bed32b375","sha256":"472e768a85f3f270b724fa600ba72facd4cbdd39f11ab8fafef965c34b1d1649","sha512":"d1ff1990689af8474b3a3bc85fe2945670180477d8378a2840b467a5c82378c82c29bc6c397ed8da114270ca94db7ff376abfa9813456763557767ba71a4d921","ssdeep":"384:vrj+FoFN3YXYSJtlkBWLp2Bk14dO/ZR3n:mFoFN3YXYSJtHLYBkP/b","tlshash":"e992638aa9f310326913a57e2beb17563271d003950ace593e9c5348cfc5f999e63bcc","first_seen":"2026-08-04T09:33:43.802145Z","last_seen":"2026-08-04T09:38:08.518316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":11,"connect":18,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcard.online/images/logs.png","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":443,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coldcard.online/","date":"2026-08-04T09:37:40.798Z","timestamp":1785836260798,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcard.online","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 18:22:21 GMT","end":"Sat, 31 Oct 2026 18:22:20 GMT"},"fingerprint":{"sha1":"E3:B7:BC:69:5E:24:AF:F5:CC:9D:76:23:B8:C0:A2:37:71:D3:1A:D0","sha256":"20:8C:FA:64:57:A1:D0:7E:F6:14:57:51:1D:9C:84:DB:9B:80:5C:5E:EF:5E:7B:A7:4B:60:38:77:64:40:BF:F1"}}},"request":{"raw":"GET /images/logs.png HTTP/1.1\r\nHost: coldcard.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcard.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 04 Aug 2026 09:37:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 224682\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 03 Aug 2026 14:52:08 GMT\r\nETag: W/\"36daa-19fc81c5935\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224682,"size_decoded":225028,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"99fa5b8e9b9e8db29b7536eba2ee6f19","sha1":"019f729dac8f4660c8fa6de41dd4d28486b7dd5c","sha256":"35cdce25ead3ef1be610ff32953d71c50ec4cf53d9f1ff635045f460e8d57b60","sha512":"8d351792a4199c272e5d2fd46089e7e8183a063db5bfefc95b833300574e258b3f04f8c22f794b8fb1897b9c03ee012a218a4cbe69d96f6e5f4108ffec8d7926","ssdeep":"6144:Vt8VAtgKgdFrLvx3WhfBSRvyaTGEQID04h:DHPgvRmsd4II4h","tlshash":"7c2423a4ead53378e0f9d496f527956296838ab31f40d3d1d5d6fbc8897e31202c0f8a","first_seen":"2026-08-04T09:33:43.796424Z","last_seen":"2026-08-04T09:38:08.520785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcard.online/images/logo.png","fqdn":"coldcard.online","domain":"coldcard.online","tld":"online"},"ip":{"addr":"45.67.84.129","port":443,"asn":203363,"as":"Kuroit Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coldcard.online/","date":"2026-08-04T09:37:40.799Z","timestamp":1785836260799,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcard.online","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 18:22:21 GMT","end":"Sat, 31 Oct 2026 18:22:20 GMT"},"fingerprint":{"sha1":"E3:B7:BC:69:5E:24:AF:F5:CC:9D:76:23:B8:C0:A2:37:71:D3:1A:D0","sha256":"20:8C:FA:64:57:A1:D0:7E:F6:14:57:51:1D:9C:84:DB:9B:80:5C:5E:EF:5E:7B:A7:4B:60:38:77:64:40:BF:F1"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: coldcard.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcard.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 04 Aug 2026 09:37:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 170603\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Mon, 03 Aug 2026 14:52:07 GMT\r\nETag: W/\"29a6b-19fc81c54dd\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":170603,"size_decoded":170949,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"43770a31579fdc03f18db6f2d8e09b16","sha1":"8b74aee6959eff7cf90c52c6632ba15f73e95db0","sha256":"e54b38ff88e8636f30214634f4b4b3957ceabddadf605353b62b5b8e7974aa66","sha512":"e08001a138a480eff08470594544e16ce7bb31a6f5bcdc72aae1be6177580675d7e50fa05a6ef21a127b11cb654620041ba5c2e137bd22bf2714a3840bb7c859","ssdeep":"3072:8n1jzcyWJvJRX35FYmc5uU2oxkeVsezNlWK9zloo6hpovJUS6bvpo:UvQvJZ35Fqc3ekeZW4KSvJUS","tlshash":"19f31285a614e8f7b7516002f3ff703c2cb03c7bd628768ce2796f9a8725b55163a851","first_seen":"2026-08-04T09:33:43.799438Z","last_seen":"2026-08-04T09:38:08.524003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":39,"receive":36,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}