# omnitraceapp.com OmniTrace wallet freeze check page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/omnitraceapp.com/
Machine-readable companion: https://phishdestroy.io/domain/omnitraceapp.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-01 01:15:07 UTC
- Last availability or vendor check: 2026-11-01 01:17:05 UTC
- Stored record updated: 2026-11-01 03:00:15 UTC
- VirusTotal detections in the stored snapshot: 3/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 178.105.41.77
- Registrar in stored WHOIS data: NAMECHEAP INC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-08-31 20:24:59 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a194ad-b6ed-7199-8f93-310a7e320abf/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/omnitraceapp.com
- Certificate Transparency search: https://crt.sh/?q=%25.omnitraceapp.com
- Web Archive lookup: https://web.archive.org/web/*/https://omnitraceapp.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records omnitraceapp.com, a page offering a free check of TRON and Ethereum wallets for freezes and sanctions.

The captured omnitraceapp.com page presents OmniTrace as a tool for checking whether a USDT wallet is frozen before accepting payment. Its main interaction is a text field accepting a TRON or Ethereum address, paired with a Check button, and the page states it never asks for keys, seed phrases or a connected wallet. Below, a live monitor lists recent freezes, unban and seizure events with addresses, networks, amounts and timing.

The stored VirusTotal domain result reports 3 detections out of 92 engines. Gridinsoft reported "suspicious"; alphaMountain.ai reported "suspicious".
Package revision: 3f8044608cee1a63c800a03c5cedaa3cc209328333c583ece47e45f731b8a616
Text generated (not scan time): 2026-11-01 02:18:22
Reviewed evidence snapshot: {"domain":"omnitraceapp.com","screenshot_available":true,"page_title":"OmniTrace — Check a USDT wallet before you accept payment","original_meta_description":"Free on-chain check for TRON and Ethereum wallets. See whether an address is frozen by Tether or Circle, sanctioned by OFAC, or dealing with wallets that already are.","initial_ai_description":"The website provides a service to check USDT wallets for freezes or sanctions. It explicitly states it does not ask for keys, seed phrases, or connected wallets. The content appears to be a legitimate tool for cryptocurrency users to assess risk.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":3,"engines":92,"malicious":1,"suspicious":2,"retrieved_date":"2026-11-01","analysis_date":"2026-10-30","flagging_vendors":["Gridinsoft","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"Gridinsoft":"suspicious","alphaMountain.ai":"suspicious","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T01:17:24Z","final_host":"omnitraceapp.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 3 detections out of 92 engines. Gridinsoft reported \"suspicious\"; alphaMountain.ai reported \"suspicious\".","page_paragraph_target_characters":499}
Source facts (timestamps as stored): {"record_id":1725738,"first_recorded_at":"2026-11-01 02:15:07","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":3,"denominator":92,"malicious":1,"suspicious":2,"vendors":{"Gridinsoft":"suspicious","alphaMountain.ai":"suspicious","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-30T15:42:49Z","checked_at":"2026-11-01 02:17:16","fetched_at":"2026-11-01T01:17:16Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":3,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Forcepoint ThreatSeeker","Gridinsoft"],"observed_at":"2026-10-30 15:42:49","checked_at":"2026-11-01 02:17:16","fetched_at":"2026-11-01 01:17:17","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 02:17:19"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-01 02:17:05"}}

## Stored page captures

- Primary capture: https://i.ibb.co/5wxyW7Y/ebe95e6fafc1.png
  Captured: 2026-11-01 01:17:05 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a194ad-b6ed-7199-8f93-310a7e320abf.png
  Captured: 2026-11-01 01:17:05 UTC
  Source report: https://urlscan.io/result/01a194ad-b6ed-7199-8f93-310a7e320abf/
- URLScan · 2026-10-29: https://screenshots.phishdestroy.io/us/01a189fe-b209-74ac-a602-762ea4f23a8d.png
  Captured: 2026-10-29 23:28:58 UTC
  Source report: https://urlscan.io/result/01a189fe-b209-74ac-a602-762ea4f23a8d/
  SHA-256: 71c177ad262491fcaea8147836411851a9b8cf94c550ed072f49245d8f1ea853
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a10f1f-3140-70dc-80fa-de3177aca24d.png
  Captured: 2026-10-06 02:51:13 UTC
  Source report: https://urlscan.io/result/01a10f1f-3140-70dc-80fa-de3177aca24d/
  SHA-256: 384f84d0f112b4d517ee58c097021222d7e0f57e73fea3faf54cdb01b5daadd9
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a10f4f-ae12-75a9-8629-6b5f5001bed3.png
  Captured: 2026-10-06 03:44:08 UTC
  Source report: https://urlscan.io/result/01a10f4f-ae12-75a9-8629-6b5f5001bed3/
  SHA-256: b0a293f161e89dc975d8f7824525871937f929f3c4ea4126ee9b46d2ccd04979
- URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a194ae-8f88-717e-9245-475609a13042.png
  Captured: 2026-11-01 01:17:15 UTC
  Source report: https://urlscan.io/result/01a194ae-8f88-717e-9245-475609a13042/
  SHA-256: 12582e1d3c29da0d462a66cc7aad03c9462a5e6306d8bca2150497c77db0a151
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/1d220c2e-63c6-4786-9c33-8a4a72c089d7.png
  Captured: 2026-11-01 01:17:24 UTC
  Source report: https://radar.cloudflare.com/scan/1d220c2e-63c6-4786-9c33-8a4a72c089d7
  SHA-256: 4636e54c0bb05192d5cf0f4add245d4e9f72e5a2f8fc7e2c89c9cbe5b9fb6bed

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-01T01:17:48Z",
        "uuid": "01a194ad-b6ed-7199-8f93-310a7e320abf",
        "scanned_at": "2026-11-01T01:16:20Z",
        "final_url": "https://omnitraceapp.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://omnitraceapp.com/",
                "from": "http://omnitraceapp.com/",
                "status": 307
            }
        ],
        "ip": "178.105.41.77",
        "ptr": "static.77.41.105.178.clients.your-server.de",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.110.94",
            "2a00:1450:4001:c15::5f",
            "178.105.41.77"
        ],
        "asns": [
            "15169",
            "24940"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "link_domains": [
            "t.me",
            "www.instagram.com",
            "www.facebook.com",
            "github.com",
            "www.reddit.com"
        ],
        "social": [
            "https://t.me/OmniTraceBot",
            "https://t.me/OmniTraceRada",
            "https://www.instagram.com/omnitraceapp",
            "https://www.facebook.com/people/OmniTrace-Intelligence/61568788340073",
            "https://github.com/omnitraceapp"
        ],
        "doc_hash": "b103e96e5ed0a86fe6ed61783f7685315d8d04b633d80d4afa30138a8599e49e",
        "script_hashes": [
            "fbae8333f47ad9bca39f888155079649c9f3ce9820618e0df27c22a2990eae3b"
        ],
        "tls": {
            "san": [
                "omnitraceapp.com",
                "www.omnitraceapp.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "omnitraceapp.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-29T10:56:01Z",
            "valid_from": "2026-10-31T10:56:02Z"
        },
        "domain_age_days": 61,
        "apex_age_days": 61,
        "tls_age_days": 0,
        "tls_valid_days": 89,
        "requests": 10,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 88,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000",
            "content-security-policy": "default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; media-src 'self'; connect-src 'self'; frame-ances",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-01T01:17:49Z",
        "uuid": "1d220c2e-63c6-4786-9c33-8a4a72c089d7",
        "scanned_at": "2026-11-01T01:17:24Z",
        "final_url": "https://omnitraceapp.com/",
        "status": 200,
        "history": [
            {
                "url": "https://omnitraceapp.com/",
                "status": 200
            }
        ],
        "dom_hash": "cacad524b29e9f79b3c2155701c2841733067e8b1e7a6ca4cbe07be248d71ec2",
        "doc_hash": "b103e96e5ed0a86fe6ed61783f7685315d8d04b633d80d4afa30138a8599e49e",
        "domain_risks": [
            "Economy & Finance",
            "Business & Economy"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "omnitraceapp.com",
                "type": "A",
                "value": "178.105.41.77"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.10",
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-08-31T22:24:59Z",
            "updated": "2026-08-31T22:25:04Z",
            "expires": "2027-08-31T22:24:59Z",
            "nameservers": [
                "dns1.registrar-servers.com",
                "dns2.registrar-servers.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-01T01:17:16Z",
        "analysis_at": "2026-10-30T15:42:49Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 1,
            "suspicious": 2,
            "undetected": 35
        },
        "detections": {
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "suspicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Suspicious, Newly Registered (alphaMountain.ai)"
        },
        "registrar": "NAMECHEAP INC",
        "created": "2026-08-31T22:24:59Z",
        "expires": "2027-08-31T22:24:59Z",
        "updated": "2026-08-31T22:25:04Z",
        "first_seen": "2026-08-31T23:49:18Z",
        "dns": [
            {
                "ttl": 1799,
                "type": "TXT",
                "value": "v=spf1 include:spf.efwd.registrar-servers.com ~all"
            },
            {
                "ttl": 1799,
                "type": "TXT",
                "value": "google-site-verification=5E3DDfKn1zzIyauGuoE8SMQx2wToWp4FSjuwH7Ee3DI"
            },
            {
                "ttl": 1800,
                "type": "MX",
                "value": "eforward1.registrar-servers.com",
                "priority": 10
            },
            {
                "ttl": 1799,
                "type": "CAA",
                "value": "letsencrypt.org"
            },
            {
                "ttl": 1800,
                "type": "MX",
                "value": "eforward2.registrar-servers.com",
                "priority": 10
            },
            {
                "ttl": 1800,
                "type": "MX",
                "value": "eforward5.registrar-servers.com",
                "priority": 20
            },
            {
                "ttl": 3601,
                "type": "SOA",
                "rname": "hostmaster.registrar-servers.com",
                "value": "dns1.registrar-servers.com"
            },
            {
                "ttl": 1800,
                "type": "MX",
                "value": "eforward4.registrar-servers.com",
                "priority": 15
            },
            {
                "ttl": 1799,
                "type": "A",
                "value": "178.105.41.77"
            },
            {
                "ttl": 1800,
                "type": "MX",
                "value": "eforward3.registrar-servers.com",
                "priority": 10
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "dns1.registrar-servers.com"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "dns2.registrar-servers.com"
            }
        ],
        "dns_at": "2026-10-30T16:02:23Z",
        "jarm": "27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523",
        "cert": {
            "san": [
                "omnitraceapp.com",
                "www.omnitraceapp.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5ebb3731b372179d1c34417c554e5a2c666",
            "sha256": "a12e7eb39a857c60dc3b967328bb766b953c012f9c15b5f014003006e0ddfaa4",
            "subject": "omnitraceapp.com",
            "valid_to": "2026-11-29T21:35:51Z",
            "valid_from": "2026-08-31T21:35:52Z"
        },
        "whois": {
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068",
            "registrar_url": "http://www.namecheap.com",
            "created": "2026-08-31T22:24:59Z",
            "updated": "1-01-01T00:00:00Z",
            "expires": "2027-08-31T22:24:59Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "dns1.registrar-servers.com",
                "dns2.registrar-servers.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "add period"
            ],
            "events": {
                "registration": "2026-08-31T22:24:59Z",
                "registrar expiration": "2027-08-31T22:24:59Z",
                "last update of RDAP database": "2026-10-30T01:14:31Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-01T01:18:02Z",
        "mail_config": {
            "mx": [
                "eforward3.registrar-servers.com",
                "eforward4.registrar-servers.com",
                "eforward5.registrar-servers.com",
                "eforward1.registrar-servers.com",
                "eforward2.registrar-servers.com"
            ],
            "spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
            "spf_lookups": 1
        },
        "caa_records": {
            "count": 1,
            "domain": "omnitraceapp.com",
            "issuers": [
                "letsencrypt.org"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-01T01:16:04Z",
            "first": "2026-11-01T01:16:04Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 6104
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://omnitraceapp.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1177
        },
        "social_tags": {
            "ogUrl": "https://omnitraceapp.com/",
            "title": "OmniTrace — Check a USDT wallet before you accept payment",
            "ogType": "website",
            "robots": "index, follow",
            "ogImage": "https://omnitraceapp.com/og-image.png",
            "ogTitle": "OmniTrace — Check a USDT wallet before you accept payment",
            "ogSiteName": "OmniTrace",
            "themeColor": "#07090D",
            "description": "Free on-chain check for TRON and Ethereum wallets. See whether an address is frozen by Tether or Circle, sanctioned by OFAC, or dealing with wallets that already are.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://omnitraceapp.com/",
            "ogDescription": "Free on-chain check for TRON and Ethereum wallets. Tether can freeze a wallet without warning. We watch for it in real time."
        },
        "trackers": {
            "requests": 9,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 4,
                "tls": 29,
                "wait": 11,
                "connect": 34,
                "download": 1
            },
            "response_ms": 79
        },
        "tls_connection": {
            "alpn": "http/1.1",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 17006,
            "co2_grams": 0.0006,
            "cleaner_than": 60
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "156.154.133.200",
                    "host": "dns2.registrar-servers.com"
                },
                {
                    "ip": "156.154.132.200",
                    "host": "dns1.registrar-servers.com"
                }
            ],
            "zone": "omnitraceapp.com"
        },
        "location": {
            "ip": "178.105.41.77",
            "asn": "24940",
            "org": "Hetzner Online GmbH",
            "city": "Nuremberg",
            "country": "DE"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "omnitraceapp.com"
        },
        "dns": {
            "A": [
                "178.105.41.77"
            ],
            "MX": [
                "{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}",
                "{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}",
                "{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}",
                "{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}",
                "{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}"
            ],
            "NS": [
                "dns2.registrar-servers.com",
                "dns1.registrar-servers.com"
            ],
            "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1788466725, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}",
            "TXT": [
                "google-site-verification=5E3DDfKn1zzIyauGuoE8SMQx2wToWp4FSjuwH7Ee3DI",
                "v=spf1 include:spf.efwd.registrar-servers.com ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gsta",
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "178.105.41.77",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://omnitraceapp.com"
            ]
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.omnitraceapp.com"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://github.com/omnitraceapp"
            ]
        },
        "linked_pages": {
            "external": [
                "https://t.me/OmniTraceBot",
                "https://t.me/OmniTraceRada",
                "https://www.instagram.com/omnitraceapp/",
                "https://www.facebook.com/people/OmniTrace-Intelligence/61568788340073/",
                "https://github.com/omnitraceapp",
                "https://www.reddit.com/user/Slow_Squash3908/"
            ],
            "external_count": 6,
            "internal_count": 15
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-08-31T22:24:59Z",
            "updated": "2026-08-31T22:25:04Z",
            "expires": "2027-08-31T22:24:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "dns1.registrar-servers.com",
                "dns2.registrar-servers.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000",
                "content-security-policy": "default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; media-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'none'; form-action 'none'; object-src 'none'",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```