Omni talked to 2 outside services on a first visit.E7E6
Tech check: the site claims on-chain / smart contracts, live data / analytics and a working app / platform, and its public page shows matching evidence.E222E223E154E155E156
We saw no known analytics or advertising services load on the first visit.E1
4 cookies were set in your browser, 3 of them by other companies' domains.E9E10E11
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, sign structured data (logins, orders or off-chain approvals), send transactions and 2 more. Read every wallet pop-up before approving.E146E152E147E148E151E153
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Contract calls in its codeaggregate3, getConfigCommitment, updateConfigE154E155E156E157
Talks to AI servicesnone seen
Live connectionsnone seen
Contract address on the page:
3dgGDY…pump · Solana (not supported yet)
What it is
The site describes itself as: “Full data aggregator for graded Pokémon cards from eBay, Alt.xyz, Fanatics Collect, Goldin, Collector Crypt, Beezie, Courtyard, Phygitals an”E2
It's built with React and Next.js (common tools for building web apps).E14E15
In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E24E25E26
It has sections such as /markets, /indexes, /omni, /auto-buy, /bid and /gap.E83E84
While loading, it called 2 endpoints on its own servers, such as /api/presence and /api/auth/session.E28E29
Where your data goes
Crypto & walletsConnect wallets, read blockchains or fetch token prices.2
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, web3.js, thirdweb, Phantom and 1 more.E17E18E19E20E21E22
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E146
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E152
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E147
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E148
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E151
signTransaction: asks a wallet to sign transactions (often Solana wallets).E153
Contract functions the app calls by name: aggregate3, getConfigCommitment, updateConfig, burnKeyAuthorizationWitness, getKey, getRemainingLimit, getRemainingLimitWithPeriod, isAdminKey and 21 more.E154E155E156E157E158E159
Chains named in the code: Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji, Celo Mainnet, OP Mainnet, Polygon Mainnet, Polygon Amoy and 12 more.E202E203E204E205E206E207
19 contract or wallet addresses are written into the code, including USDC on Ethereum and USDC on Base.E188E194
19 addresses found in the code
0xb5889a96114014d4c032ebd76772c10bf3b971370xd43d00981222a8db444a528e69f19e3ce5a7d2ff0x8a196a227c48ae8a3e36eebd4e106675cc0f6e640xaacc0000000000000000000000000000000000000x51653000000000000000000000000000000000000xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on Base0x036cbd53842c5426634e7929541ec2318f3dcf7e0xb97ef9ef8734c71904d8002f8b6bc66dd9c48a6e0x5425890298aed601595a70ab815c96711a31bc650xaf88d065e77c8cc2239327c5edb3a432268e58310x75faf114eafb1bdbe2f0316df893fd58ce46aa4d0xb88339cb7199b77e23db6e890353e22632ba630f0x754704bc059f8c67012fed69bc8a327a5aafb603
Paste any of these into the box on the home page to get the contract's blueprint.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, eth_signTypedData, eth_sendTransaction and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E146E152E147E148E151E153
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, web3.js and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E17E18E19E20E21E22
It reads blockchain data (Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji and 4 more) to show balances, prices or contract state.E202E203E204
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: Omni
page title · https://omnitcg.xyz/
E2
Page description: Full data aggregator for graded Pokémon cards from eBay, Alt.xyz, Fanatics Collect, Goldin, Collector Crypt, Beezie, Courtyard, Phygitals and more.
page description · https://omnitcg.xyz/
E3
Site name: Omni
page site_name · https://omnitcg.xyz/
E4
Main heading: Every graded slab,
on one terminal.
page h1 · https://omnitcg.xyz/
E5
78 request(s) to omnitcg.xyz
types: 28 script, 18 fetch, 15 stylesheet
GET https://omnitcg.xyz/ · script · 78 requests · network recording
E6
1 request(s) to explorer-api.walletconnect.com
types: 1 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · fetch · network recording
E7
39 request(s) to auth.privy.io
types: 34 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmus5kcju02mf0cl42y953a9k · script · 39 requests · network recording
E8
Cookie 'omni_vid' set for omnitcg.xyz
kept for about 365 days
cookie omni_vid on omnitcg.xyz · value not stored
E9
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E10
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E11
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E12
localStorage: 3 key(s) saved in your browser
localStorage keys: privy:caid, privy:connections, privy:sent:cmus5kcju02mf0cl42y953a9k:153 · values not stored
E13
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB · values not stored
E14
React detected by REA (react-runtime)
confidence: medium
omnitcg.xyz/_next/static/chunks/4bd1b696-182b6b13bdad92e3.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E15
Next.js detected by REA (next-runtime)
confidence: high
omnitcg.xyz/_next/static/chunks/webpack-59cc6eff895c8955.js · “next-runtime” · REA analyze-web-bundle 6.4.0
The site says: “X CA: 3dgGDYKaab1pAZhaEC6gZQS3PrbZdShXMcoWeVZJpump LAUNCH AP…”
page text · https://omnitcg.xyz/ · X CA: 3dgGDYKaab1pAZhaEC6gZQS3PrbZdShXMcoWeVZJpump LAUNCH AP…
E223
The site says: “…ers come from our data. 04 Auto-buy & Auto-bid. Set an alert, name a price, or escrow a max for an eBay auction. 05…”
page text · https://omnitcg.xyz/ · …ers come from our data. 04 Auto-buy & Auto-bid. Set an alert, name a price, or escrow a max for an eBay auction. 05…
E224
The site says: “X CA: 3dgGDYKaab1pAZhaEC6gZQS3PrbZdShXMcoWeVZJpump LAUNCH APP Every graded slab, on one terminal. Full data aggregat…”
page text · https://omnitcg.xyz/ · X CA: 3dgGDYKaab1pAZhaEC6gZQS3PrbZdShXMcoWeVZJpump LAUNCH APP Every graded slab, on one terminal. Full data aggregat…
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
REA hit its size budget on parts of 38 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id Kg6aMnvA.