coldcard[.]online

Analysis of coldcard.online indicates that the domain was registered through Namecheap Inc on August 2, 2026 and is currently resolved to the IPv4 address 45.67.84.129. The authoritative name servers listed are dns1.registrar-servers.com and dns2.registrar-servers.com, both of which are typical of the registrar’s default configuration. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one external sinkhole recognizes it as malicious.

VirusTotal records show that the domain was scanned by 91 independent vendors; none of the scanners raised a detection at the time of analysis, though the absence of detections does not constitute a safety assurance. No additional public threat intelligence sources such as OTX or Google Safe Browsing have been cited for this domain, and no SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving those aspects of the infrastructure unverified. The limited visibility into the hosting environment beyond the resolved IP prevents definitive attribution of the underlying server operator or geographic location.

Given the recent creation date, the active blocklist status, and the blocking by PhishDestroy, defenders should treat coldcard.online as a high‑confidence phishing indicator. Recommended mitigations include adding the domain to local deny lists, configuring network perimeter filters to drop traffic to 45.67.84.129, and monitoring for any future resolution changes or additional blocklist listings. Continuous re‑evaluation is advised as further intelligence, such as HTTP header analysis or content inspection, becomes available.