{"report_id":"5491fb75-b0c4-4d80-8db8-c34b9b394b1e","version":0,"status":"done","tags":[],"date":"2026-08-03T13:12:40Z","url":{"schema":"http","addr":"coldcardwatch.com/","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coldcardwatch.com/","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"title":"Coldcard Sweep Watch: is the stolen bitcoin still sitting there?","dom":{"size":193716,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51268)","md5":"cfb7f005e6fb869d59ef9701989632bd","sha1":"cdeacf5b2a65dcae5e6aa1d7bcbc15a38acadb79","sha256":"b88052ed62d9b5beaa5f33c4e9bb282df23e479c827a09a329759afc5f3987ce","sha512":"2593b8fec1a4309e78c4dbb4bbd5e2d8359625f12787204e68e649fe16515da27fb6fbd153142d0dea2a51073a4cc2ef5cbfb69b062f1c863b28bd627d79c4b9","ssdeep":"1536:r9X9c000FFFCCCTTgggBBB+++//MMMddN000FFFCCCTTgggBBB+++//MMMdd0Rlv:xX9t9z4HwopV5e1Sm","tlshash":"c214e078a112766b0e0fd2d108f106e1bca7382d9f61f33aedfdc221fe2855590e4966","dom_hash":"domhash6536b66631bf7e1c53fe91d66f572bc1","first_seen":"2026-08-03T13:12:41.570657Z","last_seen":"2026-08-03T13:12:41.570657Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coldcardwatch.com/","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-07T13:12:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"coldcardwatch.com","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-03","domain_rank":0,"first_seen":"2026-08-03T12:49:47.268992Z","last_seen":"2026-08-03T12:49:47.268992Z","alert_count":0,"request_count":8,"received_data":267421,"sent_data":3659,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":2,"received_data":126546,"sent_data":1126,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mempool.space","ip":{"addr":"103.165.192.202","port":443,"asn":142052,"as":"Mempool Space K.K.","country":"Japan","country_code":"JP"},"domain_registered":"2018-10-02","domain_rank":16217,"first_seen":"2019-06-04T12:09:17Z","last_seen":"2026-08-03T12:49:47.96773Z","alert_count":0,"request_count":2,"received_data":1160,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":2388,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blockstream.info","ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"domain_registered":"2014-01-23","domain_rank":18981,"first_seen":"2018-12-18T22:00:15Z","last_seen":"2026-08-03T12:49:48.286397Z","alert_count":0,"request_count":17,"received_data":76629,"sent_data":8740,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"blockchain.info","ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-10-15","domain_rank":12007,"first_seen":"2012-07-04T10:31:09Z","last_seen":"2026-08-03T12:49:49.145313Z","alert_count":0,"request_count":7,"received_data":14658,"sent_data":6692,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coldcardwatch.com/wave3.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de98f195ec47d8c8cdc061487960529c","sha1":"2f3ee82f1daa5bbc262785886282677b13c8ad95","sha256":"28688c7436a6fc4d1bf136b31c11abf36536b15d5fc77db9af58d6390cfc074a","sha512":"09b659e621809f3dd6b1b21f28f0f38c61bd946582a343ac594d867baafb3a497761382f9a1c68ac9d513ad2bb10290374431244c238b2ec9422ec6f8214a16d","ssdeep":"384:QM/oHY3i15JmspyNHd+46nSweyb8eFqmnm/ZIctSb7n1Klm:QM/kYy7JxyagwNb8eF1noZdtOYlm","tlshash":"9da28cedd3188ce8fe745ecd5582fe541c0d31375f6614e2489d22e24838b99f6b281b","size":22176,"data":"","first_seen":"2026-08-03T12:49:57.691411Z","last_seen":"2026-08-03T13:12:41.600437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/potential.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a2c74e42a03d09137c84f1508b461c1","sha1":"55c91e2b59198f051dd87b4897c8c9175d740fd5","sha256":"4340f5a111afff15297b6a82544427afa12bf261be407dc577bccd59d1cb6239","sha512":"45ccbeeed90e64c14cd4d89051a3084d94c1e5eccaabca0d8c4647955eb6bff96d141c7be1c43437510dfee431d8c098e5d00792110d8e5db372ed842bcd65af","ssdeep":"","tlshash":"eaf0e12fc2542f3549c032f25ade4362147540638584279156deefd405ca6e5850e5f7","size":573,"data":"","first_seen":"2026-08-03T12:49:57.615009Z","last_seen":"2026-08-03T13:12:41.628053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/confirmed-extra.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26f306481b6741765d06681adfd99021","sha1":"3463fca18d2542915dcd2546e7d58538fc193977","sha256":"81a5c7f999c0cf86ca4dd68e7f7b866f0bc33884875151538c413637857aea24","sha512":"a9bc92e76e3ae1fd35c5aa7b68c6dda2447e1842275ed63ce116f5bb436759a8f1a4ba68a55e51eb17968b69a504b4d5d2a650830883a66a297441ba1f282783","ssdeep":"","tlshash":"17a002112244231aef31b141a20bb627760554a69e14c16084c58c89575810a0a55052","size":58,"data":"","first_seen":"2026-08-03T12:49:57.703923Z","last_seen":"2026-08-03T13:12:41.605845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55d17cb29d3225da8458455b4eec31d9","sha1":"a00b7ad39b958b1fbf2008deec412f6cd1d440f8","sha256":"e291ab65886f38392057048805a1a686fae1cd77e736b0200ca9f81ce044de0f","sha512":"bf606fc74e63dda2520ccd741223e66e8a22ccdabf08311be79e0e39925ad6f26acabbe917b1440a6f73724c30b91b59e4dc03a2cfaef67df8fcf9acce1cf854","ssdeep":"768:rxPPmG4C8z8Up41SJZ6dGJw6hxGAHAuZ9wqDBDf:X4Cg8V1SP696Xb","tlshash":"1a13080bbba323326973907d87af7005b2b584135606c55039ded18c2f99878927faef","size":44350,"data":"","first_seen":"2026-08-03T12:49:57.718984Z","last_seen":"2026-08-03T13:12:41.645185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/data.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05f907c1c9e2fe0825eccb5f50b00d14","sha1":"3e727f7020d226373f8a46bc9982097593973376","sha256":"759c67d89d9b3f19631d31d93dcd0a5c402c5479df0cb1a685f69dc4c1f74b22","sha512":"26e28732cbaca11d7518b89b64635fe87f4d3ca1f83947e30469156ebb255c24e4aa6af2370f65c98745d9bb6a7839978cd8ac4cb1c3adcefeaee0140a2f0a3c","ssdeep":"1536:hcR+xjR5Vst+5iodGVY+Xq1LnWmPTf/zTpu7EIC7tj8S5VTd+ngfVdkpGFIixctX:w","tlshash":"408335c90ba146dded7a4da9d3b5302834a5b1365480bcb8e791aaf58f84cfa1014ff7","size":85720,"data":"","first_seen":"2026-08-03T12:49:57.625379Z","last_seen":"2026-08-03T13:12:41.598887Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/drained.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42cbf8d960ed9ebd2e93466988f148fa","sha1":"c6ffa75db4d8a6bc33d616e91ace6017a20b5cc7","sha256":"4316a97a3492a8cb75fe74cf1ad3cebd7b57e447c3a05c547cf80a2d1e653c81","sha512":"c4e11d23319faf5fe694bf3ba50ea652684b2f675619e0348a7c25c04b065e057cbc014e7f13cb873098b1334d2cedf134f6a44b5433d1d4b3141823043760ca","ssdeep":"1536:sqGkF5Oo4tzhTi65+AGqNfLzuTU+mNAp/BSxiOcnCMMONlB5AtFeJ0:d5F5Olr2AGqtLzuYMoVcnDMClTAtFW0","tlshash":"348307354fecbc783bf9c2259bc3dcb4196b7105b5033cc758d553a90292a82ba6674b","size":87038,"data":"","first_seen":"2026-08-03T12:49:57.612402Z","last_seen":"2026-08-03T13:12:41.639994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.293Z","timestamp":1785762733293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2 HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:17 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":856,"mime_type":"application/json","magic":"JSON text data","md5":"f309c0b88785ba8439667405905a4f99","sha1":"5ae346360fb66e24eafe4d7b76b82f6874fcd831","sha256":"15173810c15b3cb3e6a52217c738c3ca49189ce60b8d336bf69eed7c2746d476","sha512":"656fa9b1f360dcc05098520a84b4f05d716e405b48e0387e93a29e0632685251044bc16728afd51725efa69b1cda6b5e7dfa23999f867afc98c39c670faefdb1","ssdeep":"","tlshash":"b0d0171071063009bf37a920a23bb0b772fa0953bd8003238be64824531463a961a407","first_seen":"2026-08-03T12:49:57.707103Z","last_seen":"2026-08-03T13:12:41.574212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4242,"timings":{"blocked":0,"dns":0,"connect":153,"send":0,"wait":167,"receive":0,"ssl":3921},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.136Z","timestamp":1785762738136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.018 - 95f4d5ea0cd4379045fb4a1ac1962f63\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: 95f4d5ea0cd4379045fb4a1ac1962f63\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25592b959db5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":1231,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c1d830a3d9db3793dc9eb7aab5932ed","sha1":"508a5376638736db44a768de7a1d081dd8e3feaf","sha256":"c87c31057846d95e83159f1a310279e6d3ed15b2ad001b35267424f01fef9518","sha512":"d5ee63f4665449ccd66b100a283cbcc26b79f2719c3f59bd88b3a8e016b5ed1734fd2a3320fb43207e59ce2965f0646dc1b3359695cfdda26885b151410698a9","ssdeep":"","tlshash":"98210636597a49d3ef79f228141ebc23266177e7fe0abdc16cf4db25420a11db354282","first_seen":"2026-08-03T12:49:57.669387Z","last_seen":"2026-08-03T13:12:41.577633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.219Z","timestamp":1785762738219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8 HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":851,"mime_type":"application/json","magic":"JSON text data","md5":"d05f434a43c0fcfb3bad20e790d3edca","sha1":"6a7f8a5a1a109432e56403907dcf8b1690412169","sha256":"f0e8ac6d6da0030dbba08482a3414564bc167d287a9f0064d95c5e515ed666a0","sha512":"a0c12729192441491d4ef94546c566ddc22ddf174281ca5b30a59f713b2b5a60ec118beef5543f38e8d0640fff96cbfea2e91c0b3e8b33de032e448383fa46ea","ssdeep":"","tlshash":"12d05e00b406304dff32aa20b73b34b332fa7a479dc003234be244244629335a30911b","first_seen":"2026-08-03T12:49:57.596222Z","last_seen":"2026-08-03T13:12:41.579528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.389Z","timestamp":1785762738389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3402,"size_decoded":1918,"mime_type":"application/json","magic":"JSON text data","md5":"399c7cf5410ff612b44469b3ba2becf8","sha1":"474ebac7bbd805a2cb94e4c3abbfdaeb055fa1b0","sha256":"c8012f4f107a028850434b6951c0c1db17055481267bd4461f0b897c85203bec","sha512":"3393fd4dc49a4949746e20eb9fb806c880b8546a8a92541791a8f056d7d17a278f77da432da1991f83df0773a432cb57721907720627b079b01b79259f05edf9","ssdeep":"","tlshash":"2661741d4e1cf273f0ae22254875f8508bab309577cddc9992e5daf692b43da4f0900e","first_seen":"2026-08-03T12:49:57.607331Z","last_seen":"2026-08-03T13:12:41.58151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-03T13:12:12.510Z","timestamp":1785762732510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: W/\"6bacd1e516db31fe23a6bf7a201c1157\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::slnj9-1785762732549-138dc5461cab\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65728,"size_decoded":23245,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (618)","md5":"6bacd1e516db31fe23a6bf7a201c1157","sha1":"850153510d7e868cf0da485487c9d0ecbae43a83","sha256":"45338d30521add91cc7e6bace6096d78432d965c39bd16cb518cf4f78e798dd6","sha512":"403a2c423f35ed951779a393c6d6a14f333a8f6cc43d6d090e95f0ca1ca9f54ca5cc0a2528f32fc6abe01ce8030c9a6680a83b7270a7e9b1ee38dad21462208b","ssdeep":"768:bpy4tAoFaJOYwopV50xPPmG4C8z8Up41SJZ6dGJw6hxGAHAuZ9wqDBD+:bnFaMYwopV5s4Cg8V1SP696X6","tlshash":"23534b5ab7a22337ac3390ad179f714cb1a094239a06c1d079aed1481fcb9f4563e6de","first_seen":"2026-08-03T12:49:57.622196Z","last_seen":"2026-08-03T13:12:41.583887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.063Z","timestamp":1785762733063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:19:06 GMT\r\nexpires: Thu, 29 Jul 2027 13:19:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431587\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-07T19:57:15.906139Z","times_seen":24111,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":32,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/bitcoin.svg","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.963Z","timestamp":1785762732963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /bitcoin.svg HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bitcoin.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: \"adefd8ec11d8d11fd98c8fe81bb42bd8\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ll45s-1785762732964-220d34b4e30b\r\ncontent-length: 993\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":1507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adefd8ec11d8d11fd98c8fe81bb42bd8","sha1":"cb9ec36a11aabf2a2e5d38c67837352d69678cc4","sha256":"8c2f64711f1723b5c06c4ac5be255b942438559a76e72828f4360570ee572000","sha512":"11cb9771718311819a1052a9bb418608d136398e1d529e57435adb9f0135d9b199f19725dac501765167889d1eff6a8cbbbdae7eafa47e3742a710602b2af628","ssdeep":"","tlshash":"1e11a5950670df08d6c28513ff742aa0952fb064008da3d2e8d3cb78e183484f200cb8","first_seen":"2026-08-03T12:49:57.61692Z","last_seen":"2026-08-03T13:12:41.586585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.221Z","timestamp":1785762738221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":850,"mime_type":"application/json","magic":"JSON text data","md5":"e6e72cc39fd5c70fc03363f817b00800","sha1":"4c86e8bee9e685f68cd2bf4fb6d32f7d650ade59","sha256":"8668dab109af2e94978bd2ea8893c68f13c4c263b5d68cc9e0ef762163f32658","sha512":"8edc3e2d15714ed49c8f64373fa670b8967ef731847977f62bf37ba9c06a684d256365e8c881177e39685d5e3d1459e63ead45d34b44bd808e83758fe94df949","ssdeep":"","tlshash":"93d05e80b415300cff3ae820f37b307771f949479d4503234be08825822263ad30840b","first_seen":"2026-08-03T12:49:57.618965Z","last_seen":"2026-08-03T13:12:41.587839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P|36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.849Z","timestamp":1785762738849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P|36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35 HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.016 - 0be144c01fdedaa5bc94cc97364518c9\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: 0be144c01fdedaa5bc94cc97364518c9\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25592bdce6e5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1453,"size_decoded":1367,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8102e0f9ff36309979c93723041306a","sha1":"f2273c1499983f36176338192d6a043b565f45e0","sha256":"53efa39a2e06e696988c4b224099f8b983ae4c5d285bbdb6d677c8b746b8dc2e","sha512":"c9b6b0e3a6e5bbf3fb48b55153d09a5bfb53bda3be3a82d99398efc25f8090ca5e764f908aca520d23f391f3a315071e08c0550b4e3c2022699fb9b81e228f5e","ssdeep":"","tlshash":"dc312b36197b45d3ef74f224141e7c131a6177e7fe0abdc16cf4db25421a16cb254282","first_seen":"2026-08-03T12:49:57.710409Z","last_seen":"2026-08-03T13:12:41.588842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:19.017Z","timestamp":1785762739017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35 HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:19 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":857,"mime_type":"application/json","magic":"JSON text data","md5":"fe471bee7b20d2a715593d4d226de436","sha1":"992daa65e858c379c32c277b6dc79fa9b4bc5276","sha256":"08a7baaced0255891e1e3bc2c7099dbbf82c9f0103f61e11c63e471264dcd474","sha512":"2641ade11eafb18f42442d95784e7cd636ab728ff6e4797e29621e63671f69bd38192ffe08112a2b6c2fe4a6f6d611a54c3049a186e1270eed3e6398dbf7e472","ssdeep":"","tlshash":"4bd0c7c0b4553108bf72a560a73b3473b2f95d439d4403678ff584158365775e30a447","first_seen":"2026-08-03T12:49:57.602249Z","last_seen":"2026-08-03T13:12:41.589875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mempool.space/api/v1/prices","fqdn":"mempool.space","domain":"mempool.space","tld":"space"},"ip":{"addr":"103.165.192.202","port":443,"asn":142052,"as":"Mempool Space K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.146Z","timestamp":1785762733146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mempool.space","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 29 Aug 2025 00:00:00 GMT","end":"Mon, 28 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FB:10:B0:95:71:AE:60:08:CB:42:0B:A6:68:B2:D4:0E:BF:A9:4A:1F","sha256":"9F:AF:42:97:18:21:FC:98:A2:13:03:7F:D7:B8:FB:53:53:0E:64:5C:18:21:C1:15:0C:73:52:68:59:5D:B2:54"}}},"request":{"raw":"GET /api/v1/prices HTTP/1.1\r\nHost: mempool.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 03 Aug 2026 13:12:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 105\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\naccess-control-expose-headers: X-Total-Count,X-Mempool-Auth\r\nexpires: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: W/\"69-wcOmDF1im74XOVVBN9Dtjp4+mUo\"\r\nonion-location: http://mempoolhqx4isw62xs7abwphsq7ldayuidyx2v2oethdhhj6mlo2r6ad.onion/api/v1/prices\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors 'self'\r\npragma: public, public\r\ncache-control: no-cache, public\r\nvary: Accept-Language, Cookie\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":105,"size_decoded":979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eb38d5ace80368da083eb9082bc02d1d","sha1":"c1c3a60c5d629bbe1739554137d0ed8e9e3e994a","sha256":"c5ca649adbf4dde48c2265abc993c48775ae11a6ccbdba859634f830bbc20f59","sha512":"bae913342eba3e5a59ab56213921c53b17f902f886fc79e8ffb02566b541d3f7b05dd57f879ade8cb9183bd88bf2544a0562275966244e6d95fa84c87686532a","ssdeep":"","tlshash":"43b01240690813c8c099a628e2d0f8e48a3406040011ad62d48e67ce19d6cbc458171e","first_seen":"2026-08-03T13:12:41.591188Z","last_seen":"2026-08-03T13:12:41.591188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":26,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/bitcoin.svg","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.494Z","timestamp":1785762733494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /bitcoin.svg HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3369\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bitcoin.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 03 Aug 2026 13:12:13 GMT\r\netag: \"adefd8ec11d8d11fd98c8fe81bb42bd8\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dg44v-1785762733495-212b874e0fae\r\ncontent-length: 993\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":993,"size_decoded":1507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adefd8ec11d8d11fd98c8fe81bb42bd8","sha1":"cb9ec36a11aabf2a2e5d38c67837352d69678cc4","sha256":"8c2f64711f1723b5c06c4ac5be255b942438559a76e72828f4360570ee572000","sha512":"11cb9771718311819a1052a9bb418608d136398e1d529e57435adb9f0135d9b199f19725dac501765167889d1eff6a8cbbbdae7eafa47e3742a710602b2af628","ssdeep":"","tlshash":"1e11a5950670df08d6c28513ff742aa0952fb064008da3d2e8d3cb78e183484f200cb8","first_seen":"2026-08-03T12:49:57.61692Z","last_seen":"2026-08-03T13:12:41.586585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:17.561Z","timestamp":1785762737561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:17 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9070,"size_decoded":3138,"mime_type":"application/json","magic":"JSON text data","md5":"af3cc61714581131bd65633e7dc32a9a","sha1":"7282e54b77aa5938b4c51fdaa99d60ee59ba5f2a","sha256":"1c0ae1c912f203a2e94b57a3bde0d12381107bff88ab8efeb9da2cab698c7228","sha512":"1ba6ccadb6e7128ce2be2a6f84d4fb3bd5836196a9573c21863f5f065959d8abaf22b5914f104b684bb9a8727eac1936df5fdb4b5998db526c6e54236a5d9347","ssdeep":"192:rZKYQr8wTWp7r8er8Cur82dcr8Yr8ITGr89Hr8DEr8Yr8CQJP:rknr8wEr8er8Pr89r8Yr8ISr8xr8DErG","tlshash":"ca12372c5e4cf6a3a25665ad4876d9a94f9720d2f6d8dc8c41d24cf39ba0367cf4d80c","first_seen":"2026-08-03T12:49:57.714495Z","last_seen":"2026-08-03T13:12:41.592983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.222Z","timestamp":1785762738222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284,"size_decoded":854,"mime_type":"application/json","magic":"JSON text data","md5":"29cc2011f05a0d2ff6eccf563415cff9","sha1":"a34e46ed14624a1b460df8d8cc2e4bf8d62fe91b","sha256":"11076da07ec5caa197a52e803ac11cd59f05e0008c204189ea926ca14066e56b","sha512":"3da79cb3b56a605832b32fa57b149cfb46809343a707ece06e99f3a796ba9f7d0f2ee82ad5dddf2d4b326129252607d08345de568b576d0e1829d637179694f1","ssdeep":"","tlshash":"ecd09e80b116a109bf32f524a77b70b772f90a935f800b6b4fe584a9421573a971d806","first_seen":"2026-08-03T12:49:57.645489Z","last_seen":"2026-08-03T13:12:41.594381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":156,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.626Z","timestamp":1785762738626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":860,"mime_type":"application/json","magic":"JSON text data","md5":"42c64cbb53ff8d4518457bb8be3d1e62","sha1":"7d0609f68d1ed2f32fb1495b12e4b38dafbdcc41","sha256":"eb3db13c4d8fc64644c30f18bdd3007924e1e52d7a6208ce11f8395237ba8f22","sha512":"8a16069e51c4b1576dce17a76596f3ac45627dbf13826397a3fd4896e2a1503de01b234135934b2a5e2025d71c047a001a2b0eaf5e5391e34cb019c81540346d","ssdeep":"","tlshash":"14d05e40b4422018bf72a420b73b30b772f92d079e8403234fe584694215735a31d00b","first_seen":"2026-08-03T12:49:57.656905Z","last_seen":"2026-08-03T13:12:41.595695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:19.180Z","timestamp":1785762739180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:19 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11268,"size_decoded":4629,"mime_type":"application/json","magic":"JSON text data","md5":"174af6c7e5e269dfd873d37e5ab19262","sha1":"6c7832493e4b744b7ed19fe43cd957e4cb2b91c4","sha256":"c64114c1490b9f1a788f5ad74dd9c750b1774d0e0994fb5ee2064d29b1beed7d","sha512":"3e113eb11323a624dc657e35d7b8025ae1b8b0c73ce677b4be33769649825685e19c8769308b89ab44d380c1b50388d07a9a486c4053c8511ba1c5bc3fd9adc3","ssdeep":"192:JmjJRK2jp1xfA7sM4CY8Co8cQUg8j/N/jy+bbEQ7+VL2PqPOI04sf+V77:8jJRK2ljfdjCY9oDQUgyVLyibEQ7+VLn","tlshash":"1532b60d0e5cf2b3b1aba1744872dc854b9b208177c5d88c02e64afbe6f53d3ae1d609","first_seen":"2026-08-03T12:49:57.66649Z","last_seen":"2026-08-03T13:12:41.597213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/data.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.952Z","timestamp":1785762732952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /data.js HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"data.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: W/\"05f907c1c9e2fe0825eccb5f50b00d14\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6bcrx-1785762732953-12eb1f59c6ae\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":85720,"size_decoded":21753,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"05f907c1c9e2fe0825eccb5f50b00d14","sha1":"3e727f7020d226373f8a46bc9982097593973376","sha256":"759c67d89d9b3f19631d31d93dcd0a5c402c5479df0cb1a685f69dc4c1f74b22","sha512":"26e28732cbaca11d7518b89b64635fe87f4d3ca1f83947e30469156ebb255c24e4aa6af2370f65c98745d9bb6a7839978cd8ac4cb1c3adcefeaee0140a2f0a3c","ssdeep":"1536:hcR+xjR5Vst+5iodGVY+Xq1LnWmPTf/zTpu7EIC7tj8S5VTd+ngfVdkpGFIixctX:w","tlshash":"408335c90ba146dded7a4da9d3b5302834a5b1365480bcb8e791aaf58f84cfa1014ff7","first_seen":"2026-08-03T12:49:57.625379Z","last_seen":"2026-08-03T13:12:41.598887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/wave3.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.954Z","timestamp":1785762732954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /wave3.js HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"wave3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: W/\"de98f195ec47d8c8cdc061487960529c\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsr49-1785762732955-3812cfe86c78\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22176,"size_decoded":13671,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (22175)","md5":"de98f195ec47d8c8cdc061487960529c","sha1":"2f3ee82f1daa5bbc262785886282677b13c8ad95","sha256":"28688c7436a6fc4d1bf136b31c11abf36536b15d5fc77db9af58d6390cfc074a","sha512":"09b659e621809f3dd6b1b21f28f0f38c61bd946582a343ac594d867baafb3a497761382f9a1c68ac9d513ad2bb10290374431244c238b2ec9422ec6f8214a16d","ssdeep":"384:QM/oHY3i15JmspyNHd+46nSweyb8eFqmnm/ZIctSb7n1Klm:QM/kYy7JxyagwNb8eF1noZdtOYlm","tlshash":"9da28cedd3188ce8fe745ecd5582fe541c0d31375f6614e2489d22e24838b99f6b281b","first_seen":"2026-08-03T12:49:57.691411Z","last_seen":"2026-08-03T13:12:41.600437Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.872Z","timestamp":1785762738872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":853,"mime_type":"application/json","magic":"JSON text data","md5":"144d897ebbffadf20e12bcd8771729eb","sha1":"ade5b6e748d7125c43ab6e80da02e5b4f2894fb2","sha256":"584f97ebeb57b5c06bba289725a2b6a77ec0b72d828a71294ad30fe56f6836c3","sha512":"1606ea48c508ef373d51123cb5aeb72e6ffff53f65a63f04ad6dd1c57768ca087b6876eac2dbd4421886ce524a630efe8a6636784921a33e94114cbdfcebe963","ssdeep":"","tlshash":"b9d09e40b402610dff76a830a37f74bb37fe2d879d9503238fe5845d822563ad309516","first_seen":"2026-08-03T12:49:57.599294Z","last_seen":"2026-08-03T13:12:41.602242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.548Z","timestamp":1785762738548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.014 - 4aaed613ea9417042ec8d32f6807fccd\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: 4aaed613ea9417042ec8d32f6807fccd\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=rAwSAlL1JwV.Cq.0pATikRh5hr6_8Ma3JLNw4BVdo50-1785762738.5453987-1.0.1.1-TLcjmAc5y91PXz2LsO_z9ebcl511nAIuUo9yl3SKY4GQ_6Vc3YqOYLgNE.HBThik9ON8ByM_Y6Pq.Gve5QhXn5zRDGhznSeUsTuQIWT1FvwsNKa6kqH8TKOPNk4irP4pFi1Wfw02opSIamLxR07c0jB3axOoHOSGA5m4lN2P1AQ; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=rAwSAlL1JwV.Cq.0pATikRh5hr6_8Ma3JLNw4BVdo50-1785762738.5453987-1.0.1.1-TLcjmAc5y91PXz2LsO_z9ebcl511nAIuUo9yl3SKY4GQ_6Vc3YqOYLgNE.HBThik9ON8ByM_Y6Pq.Gve5QhXn5zRDGhznSeUsTuQIWT1FvwsNKa6kqH8TKOPNk4irP4pFi1Wfw02opSIamLxR07c0jB3axOoHOSGA5m4lN2P1AQ\"}]}\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=rAwSAlL1JwV.Cq.0pATikRh5hr6_8Ma3JLNw4BVdo50-1785762738.5453987-1.0.1.1-TLcjmAc5y91PXz2LsO_z9ebcl511nAIuUo9yl3SKY4GQ_6Vc3YqOYLgNE.HBThik9ON8ByM_Y6Pq.Gve5QhXn5zRDGhznSeUsTuQIWT1FvwsNKa6kqH8TKOPNk4irP4pFi1Wfw02opSIamLxR07c0jB3axOoHOSGA5m4lN2P1AQ\"\r\ncf-ray: a25592bbec655697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1269,"size_decoded":2480,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52a0c656ae2fb3034add301ff9ae9c2f","sha1":"995f42ba4a0f86685009ba6634de4d405d53e657","sha256":"e4ff82e8aa557c057e6bae68209a1d3d0a85c32901794c0e10db340c999ac315","sha512":"f05323ff11f130208536ecfc2925faee060e69ca10e046aa09239fa92dcf942c6986d3e44600dc43581eaa8559b7e92e3bf0c06838a9e9e25876fc47d7de8f2e","ssdeep":"","tlshash":"7d213a36197b45d3ef75f228141ebc23256177e7fe09bdc12cf4db25420a12c7254242","first_seen":"2026-08-03T12:49:57.648625Z","last_seen":"2026-08-03T13:12:41.604243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/confirmed-extra.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.957Z","timestamp":1785762732957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /confirmed-extra.js HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"confirmed-extra.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: \"26f306481b6741765d06681adfd99021\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pqf7v-1785762732959-c049e5102384\r\ncontent-length: 58\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58,"size_decoded":602,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"26f306481b6741765d06681adfd99021","sha1":"3463fca18d2542915dcd2546e7d58538fc193977","sha256":"81a5c7f999c0cf86ca4dd68e7f7b866f0bc33884875151538c413637857aea24","sha512":"a9bc92e76e3ae1fd35c5aa7b68c6dda2447e1842275ed63ce116f5bb436759a8f1a4ba68a55e51eb17968b69a504b4d5d2a650830883a66a297441ba1f282783","ssdeep":"","tlshash":"17a002112244231aef31b141a20bb627760554a69e14c16084c58c89575810a0a55052","first_seen":"2026-08-03T12:49:57.703923Z","last_seen":"2026-08-03T13:12:41.605845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.084Z","timestamp":1785762733084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:19:06 GMT\r\nexpires: Thu, 29 Jul 2027 13:19:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431587\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-07T19:57:15.906139Z","times_seen":24111,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":22,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mempool.space/api/v1/ws","fqdn":"mempool.space","domain":"mempool.space","tld":"space"},"ip":{"addr":"103.165.192.202","port":443,"asn":142052,"as":"Mempool Space K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.155Z","timestamp":1785762733155,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mempool.space","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 29 Aug 2025 00:00:00 GMT","end":"Mon, 28 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FB:10:B0:95:71:AE:60:08:CB:42:0B:A6:68:B2:D4:0E:BF:A9:4A:1F","sha256":"9F:AF:42:97:18:21:FC:98:A2:13:03:7F:D7:B8:FB:53:53:0E:64:5C:18:21:C1:15:0C:73:52:68:59:5D:B2:54"}}},"request":{"raw":"GET /api/v1/ws HTTP/1.1\r\nHost: mempool.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coldcardwatch.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: om1sppCmX9Db3GOxPCXEsA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 03 Aug 2026 13:12:13 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: PsDs/lFLWMwysMqQ9dI8KpeSNZ0=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":181,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T21:24:26.439743Z","times_seen":17767691,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":93,"connect":118,"send":0,"wait":25,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:17.722Z","timestamp":1785762737722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.011 - ec19b678cdaf3918ece079f99aa0ca0a\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: ec19b678cdaf3918ece079f99aa0ca0a\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25592b6be9d5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":1129,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2c512312400e557479b29c81dec463b1","sha1":"9ee119b81d6008590ea76bdde913bbe0f7012373","sha256":"2f223636eb3792a174d1438938b06c370e3d8ee5107c4c66e392122e79be4c61","sha512":"6e8dcb3e4f242d762cb6c6e79caaf635c95c862273aa1532f4d513b3dc387222a6cf22a2c088440cd6d7fc1082fe0683a55f29a67f3226c0be31bfa26770aa73","ssdeep":"","tlshash":"82115932197e49d3df34f128180dbc231aa277a7fe0abdc12cf8df25020a11db254142","first_seen":"2026-08-03T12:49:57.60484Z","last_seen":"2026-08-03T13:12:41.620558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.381Z","timestamp":1785762738381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3402,"size_decoded":1974,"mime_type":"application/json","magic":"JSON text data","md5":"d854e2cc80fda8e810a722ad4136cb1e","sha1":"a58475c1bab7f0a357a478cb56b78045f637f3d2","sha256":"c824e5f8279db19ae417f98d3e58eb81e9099ffa283709f6f01ec794b589fea1","sha512":"7187002834c3c23408ca7165c279bb2f5284ac2dab91c867afc817d94c3c2dc08e661c240903fb6785b75693c78336a6396a4602b990e6cdcf81568ce3134f76","ssdeep":"","tlshash":"1e61321d4d58f277f0ae12354871f8815be630a576cddc98e6e6c9faa2743db4f0900a","first_seen":"2026-08-03T12:49:57.676945Z","last_seen":"2026-08-03T13:12:41.622377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.786Z","timestamp":1785762738786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.016 - e3ef6db7523fd5239171bf73ea7913e0\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: e3ef6db7523fd5239171bf73ea7913e0\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25592bd6dfe5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":1327,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ffc7ad51430c0fbc749ec54bee4958ef","sha1":"cbbca347273c77f3e32b02949a2f9eb83850fb7c","sha256":"10c415e8b18560e946d3d1b5096a2b1b8b43d37f1a72dca4cdfc99b9ccbf3a09","sha512":"957e60fa0ea2b15168775bdae984a06aa86d9f610f4d9fe56c8f6d8c2678a70b21a24fab60fddd310cd71dd4662c4a508e0b63e9ccef49f1407dc81439411f2a","ssdeep":"","tlshash":"90212936197b45d3ef75f224145ebc131a6177e7fe0abdc16cf4db25420a16c7254282","first_seen":"2026-08-03T12:49:57.659084Z","last_seen":"2026-08-03T13:12:41.624049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P|36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35|3KMmeqPeQcngyTehdfSwsGqvxfU7J7qtc8","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:19.023Z","timestamp":1785762739023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6|bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s|bc1qsd9tklcz7yw72aztnlyfmn9hlc02tjq7ekjah8|bc1qvrpckutek504fr8jv06hljxfslpw4cwf60cddc|bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm|3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy|3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P|36c8aprKMXmf4bGEnKCGvJwKKqAZQbQW35|3KMmeqPeQcngyTehdfSwsGqvxfU7J7qtc8 HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.015 - a5581baeb97880fca84c9d7b34101841\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: a5581baeb97880fca84c9d7b34101841\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a25592beefb25697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":1415,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b2bbd82c2bc0de554f66097258952750","sha1":"df4206dc7dd11b217637d89f8000c3953c3ed9af","sha256":"6a519a974c5d9523ebc858ff573d7d205406f7eb6bfcbbd99a95dd05dce297cf","sha512":"9cadea1b10caf71f061050bbd2a1216a836b34a885ea8de63d58b56feeb150873164debc735ed6ce0d710b285512bbf6e4f40f3a2b608c2c6e164c3d3f2eef83","ssdeep":"","tlshash":"65312b72293b45d3ef74f224141ebc131aa137d7fe09bcc15cf4db25521a16c7254292","first_seen":"2026-08-03T13:12:41.62571Z","last_seen":"2026-08-03T13:12:41.62571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/potential.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.956Z","timestamp":1785762732956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /potential.js HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"potential.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: \"7a2c74e42a03d09137c84f1508b461c1\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6kv2r-1785762732960-324c3777e360\r\ncontent-length: 573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":573,"size_decoded":1112,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (572)","md5":"7a2c74e42a03d09137c84f1508b461c1","sha1":"55c91e2b59198f051dd87b4897c8c9175d740fd5","sha256":"4340f5a111afff15297b6a82544427afa12bf261be407dc577bccd59d1cb6239","sha512":"45ccbeeed90e64c14cd4d89051a3084d94c1e5eccaabca0d8c4647955eb6bff96d141c7be1c43437510dfee431d8c098e5d00792110d8e5db372ed842bcd65af","ssdeep":"","tlshash":"eaf0e12fc2542f3549c032f25ade4362147540638584279156deefd405ca6e5850e5f7","first_seen":"2026-08-03T12:49:57.615009Z","last_seen":"2026-08-03T13:12:41.628053Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:17.800Z","timestamp":1785762737800,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:17 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":857,"mime_type":"application/json","magic":"JSON text data","md5":"efba05eda0610e6c1f25a619028e71ac","sha1":"4cb47da0fa66f9aecd499b7259ea784abc86ec2a","sha256":"446088edf69981b93e8399a449b7156b76f720267d97971e02e69761ad893f36","sha512":"35a98bf73987dbfe2011ac31c7dc5eccaa54bcfa5968d38117e8d61ab870f3c6112b7797b02ebe2bbc831b41bb471fb3aa801408bc275115b1d4c70436a1a6aa","ssdeep":"","tlshash":"4fd09e51b819705aff36f418a77b347332fa6e579e8103a34fe5441a8315736972c507","first_seen":"2026-08-03T12:49:57.628479Z","last_seen":"2026-08-03T13:12:41.629828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.532Z","timestamp":1785762738532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qlryk6u4f89r89qqp99rm4k6u8hr7tmyff79edm/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3136,"size_decoded":1993,"mime_type":"application/json","magic":"JSON text data","md5":"218c3128cc9bc66a4c49cac196b5ca19","sha1":"360b84b9bf261b09b0601b360cc4cb558309f680","sha256":"643d92213cf3e1db433c98f4b30dcfe742d53c263aea74ed96a340baec6bbe36","sha512":"ae9b42b7acf147516f91b6e8e3759e7f7046b7bef28f498869fc279c8a9b34c9d199f0a3218148d6587b0545305fa2c093c1a6020c4ec47f674e690bb4e3cd34","ssdeep":"","tlshash":"6251751e1d6cf677f016217a49b6f8445ba5709633c8dcc880e589f7966039f4f4e00c","first_seen":"2026-08-03T12:49:57.620586Z","last_seen":"2026-08-03T13:12:41.631457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:19.031Z","timestamp":1785762739031,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/3PoTBqmiP52qqdm8XP3TouR2ygeQAdnK7P/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:19 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11925,"size_decoded":4998,"mime_type":"application/json","magic":"JSON text data","md5":"822a5043f187f9d4ad0f4de9a1b6fd75","sha1":"c4dd742123769c10de1b7d00712cbc5788710251","sha256":"8c8197b73eb7f06f962ddba7a7e64491094f14b4917139fe01212f5950596cd0","sha512":"89de52271fcfa661a2befa606368a1a9c08b1dff7c64d42030f3ea1ed830251c78e1266503036fa737b39999d72fcf0ce0523e1ff72fa1e9e27fc99bca302a95","ssdeep":"192:gVaDeim43mhjyYCwPh3mhSSteGqwsqkpPmIFpwzXQBh/r8mfEHje:gV8erCmhvPh3mgSPqwsqZOw7QTr8mMy","tlshash":"a632a61e4d5cf373b05b61348cb3d8854b6a20817ac9d88d42f649f7d6e13a7de5d109","first_seen":"2026-08-03T12:49:57.609993Z","last_seen":"2026-08-03T13:12:41.633149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:17.969Z","timestamp":1785762737969,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7760,"size_decoded":3022,"mime_type":"application/json","magic":"JSON text data","md5":"9f3978b40f86acde082392123fb587c7","sha1":"182838d04afa997174d6b4bcd5800e12014cc060","sha256":"775b4bea5faea139a2798fd3ce78013d65d925ee31d157c2571c1ac9dcecd592","sha512":"37762d536a5b4c4a428e626688ba7340cf275c26b629dddcd4f570c6e97951d6d60728e688123cb73dea6653ed533e637fbbf056399d038be67e46ed2bcd0a0e","ssdeep":"96:lwfC5mr8fw4em7+GexVjh9wsatSmkewdDDQH4JHqQwCk2cK012PmJcYr8hakfkjc:rgr816BPat9keA5dDCZKYd6Yr8hjYscA","tlshash":"baf1732d4f5cf2b3e06b213a4872f4859ba6709577cde8c4a5e5ddfaa26438b4f0d009","first_seen":"2026-08-03T12:49:57.63072Z","last_seen":"2026-08-03T13:12:41.634945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/address/3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy/txs","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:18.835Z","timestamp":1785762738835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/address/3P3K2MQwkgk85UkTyLSJC6cJZx3ec1Lfgy/txs HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: EXPIRED\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12728,"size_decoded":5234,"mime_type":"application/json","magic":"JSON text data","md5":"9cf11f691ab8f927f4a36e841a7c60b0","sha1":"c5c50bee82829c54a08c633ad7e9c0675779324d","sha256":"10a967e4277b6bb39e3b23cf64708e0dbff562fcda7bd7a045a0dbcd573650cf","sha512":"c77128a007400a01ea37aba592fcc7551b543a71754781eeecca1c2249b04cb9393270e6b87ca4df6e84b66e0d677f4ccf391e593f37ba82535f14f5408d2351","ssdeep":"192:E4mpqfwgFrxLgLGo1u4qNqxLuDoGFE2yZPb9a1vtwjhNtmGMfNjd8a:E1ywgDLgLG4u/NSu1FENZPb9aMRMfPv","tlshash":"2242a72c0e5cf273b14f51218972d8850baa308577c5dc9c42eb8afbf6a53d7ae5c50a","first_seen":"2026-08-03T12:49:57.651035Z","last_seen":"2026-08-03T13:12:41.637301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.949Z","timestamp":1785762732949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 03 Aug 2026 13:12:13 GMT\r\ndate: Mon, 03 Aug 2026 13:12:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1704,"size_decoded":1093,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ff06e5d2231471d77a8ba2c8c46184b8","sha1":"ff4df9a5dffcd3b4c6effd5c919fd5fed96ef9bf","sha256":"c419129658a2860abdec0894cc3b0d54ee85753e0a6329ff302766ee3151d65d","sha512":"20c56be4a439530ed2539f7b7cb6fd7aad25208f1539ad82107fd5220f20e7b1acea7a43ecccc6decff507f5eb72bf0c642896bbd9a0bee6e8cc39598571194f","ssdeep":"","tlshash":"6b31cc80046bb014db532cc022cd7e32ef1f619014449834aafe2888fcaac6d5361b4d","first_seen":"2026-03-15T09:56:03.153514Z","last_seen":"2026-08-03T13:12:41.63902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coldcardwatch.com/drained.js","fqdn":"coldcardwatch.com","domain":"coldcardwatch.com","tld":"com"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:12.953Z","timestamp":1785762732953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coldcardwatch.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:33:46 GMT","end":"Sat, 31 Oct 2026 23:33:45 GMT"},"fingerprint":{"sha1":"54:45:8C:FE:F3:A2:57:34:5B:02:87:0F:B3:84:2B:8D:3E:0C:F8:11","sha256":"1A:2D:99:49:7A:36:9D:42:8C:1C:3F:F3:89:3B:45:4B:D5:77:55:D1:1F:6B:39:FA:51:32:6D:72:C3:5D:52:28"}}},"request":{"raw":"GET /drained.js HTTP/1.1\r\nHost: coldcardwatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coldcardwatch.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 3368\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"drained.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 03 Aug 2026 13:12:12 GMT\r\netag: W/\"42cbf8d960ed9ebd2e93466988f148fa\"\r\nlast-modified: Mon, 03 Aug 2026 12:16:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glzc4-1785762732953-6d4616a785bb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87038,"size_decoded":42807,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"42cbf8d960ed9ebd2e93466988f148fa","sha1":"c6ffa75db4d8a6bc33d616e91ace6017a20b5cc7","sha256":"4316a97a3492a8cb75fe74cf1ad3cebd7b57e447c3a05c547cf80a2d1e653c81","sha512":"c4e11d23319faf5fe694bf3ba50ea652684b2f675619e0348a7c25c04b065e057cbc014e7f13cb873098b1334d2cedf134f6a44b5433d1d4b3141823043760ca","ssdeep":"1536:sqGkF5Oo4tzhTi65+AGqNfLzuTU+mNAp/BSxiOcnCMMONlB5AtFeJ0:d5F5Olr2AGqtLzuYMoVcnDMClTAtFW0","tlshash":"348307354fecbc783bf9c2259bc3dcb4196b7105b5033cc758d553a90292a82ba6674b","first_seen":"2026-08-03T12:49:57.612402Z","last_seen":"2026-08-03T13:12:41.639994Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockstream.info/api/blocks/tip/height","fqdn":"blockstream.info","domain":"blockstream.info","tld":"info"},"ip":{"addr":"23.155.96.128","port":443,"asn":396997,"as":"AS-BLOCKSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.147Z","timestamp":1785762733147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockstream.info","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 00:48:24 GMT","end":"Tue, 06 Oct 2026 00:48:23 GMT"},"fingerprint":{"sha1":"5D:82:22:A8:26:50:F9:7B:C3:41:B2:56:B3:1B:D0:6A:BC:4E:BB:09","sha256":"DB:F6:93:E7:6E:FE:E6:0E:89:7F:3B:F8:E0:44:B5:35:5F:7F:52:5D:C7:35:9B:D3:76:18:93:6B:78:FC:E4:F6"}}},"request":{"raw":"GET /api/blocks/tip/height HTTP/1.1\r\nHost: blockstream.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 03 Aug 2026 13:12:17 GMT\r\nContent-Type: text/plain\r\nContent-Length: 6\r\nConnection: keep-alive\r\ncache-control: public, max-age=10\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-total-results\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6,"size_decoded":632,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"313ae22f9d10de71373eecfe1e3c8857","sha1":"1a9ab99d5e5c63e4ae341fe155f4c3d03bab31e3","sha256":"90e130c1c5307f5fbb20a83984ba2d9255e696975498b96a94ed2c526a733497","sha512":"77a4876dc10e0c11e64bf2783ac821c5d868eb048d56c6e008a34dbc9c9bb37f5a1d05326396865fac86761cf0466594de3e7d3dfb0ded408d3cef583741a535","ssdeep":"","tlshash":"84400000000000c00000c000000000c00000000000000000000000000c000300000c00","first_seen":"2026-08-03T13:12:41.641479Z","last_seen":"2026-08-03T13:12:41.641479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4386,"timings":{"blocked":-1,"dns":19,"connect":158,"send":0,"wait":166,"receive":0,"ssl":4043},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.117.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coldcardwatch.com/","date":"2026-08-03T13:12:13.152Z","timestamp":1785762733152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /balance?active=bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r|bc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3|bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q|bc1qnk4zh9qcnap2mycp56qjrgza3cc8ylrh8fecp0|bc1qtfrwa4j6rmj9rsgspv6a0yjumkg39js2numu75|bc1qhh4jkkj07vxpdt0zlvxctjlfhqmurhxa24x3h2|bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6 HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coldcardwatch.com/\r\nOrigin: https://coldcardwatch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 03 Aug 2026 13:12:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: haskoin-store-btc-ld4\r\nx-blockchain-cp-f: vdb7 0.016 - d38dd7dbd4070bb519904f5e927eeee8\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-original-host: blockchain.info\r\nx-request-id: d38dd7dbd4070bb519904f5e927eeee8\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a255929a4c225697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":1093,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd451035d57094c40e5bbbc9f67c21f1","sha1":"831eb8da8c1c088560acd8684071d86adf41d917","sha256":"eb1a3cc4dbd6ee1da7a7f764dcf497aac45f52cd89e0fa082b00bf0151e266f6","sha512":"deafbe8e92aa09c8b1eeb476a0a3265cf41dd540cd9217bee9f48f9cbb38c76515a2a6386fe2faf9367e142e5ffebb165eda7eccd4f13972f57d3e1fb1530333","ssdeep":"","tlshash":"9b014931197e59c3df75f128240dbc6719a27be6fa0abec02cf4df35024a12cb254142","first_seen":"2026-08-03T12:49:57.629572Z","last_seen":"2026-08-03T13:12:41.643431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":77,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
