He also keeps promoting the website it used to redirect to (he took the redirect down and replaced it with cia.gov) on his personal X account and the fearmongering page links to the Coldcard website.

Is this information gathered through whois or something like that?