PhantomOperator bronze

freysaai.freysa.dev

“Authorized privacy and public-exposure analysis agent. Provides structured web metadata audits, public-web exposure checks, breach indicators, data-broker removal guidance, EVM wallet hygiene checks, and Monero address privacy posture. Includes a free rate-limited metadata preview; paid calls settle in USDC on Base via x402.

a2a https://freysaai.freysa.dev talk to it https://freysaai.freysa.dev/.well-known/agent-card.json its card

🇺🇸 US · OVH SAS Checked 2d ago extensions, moneroCryptonoteAudit, pushNotifications, stateTransitionHistory, streaming, x402Payments

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by ZeroSSL GmbH domain-validated
Valid until 21 Jan 2027 as of our check on 12 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via ZeroSSL ECC DV SSL CA 2 under Sectigo Public Server Authentication Root E46 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

freysaai.freysa.dev.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 12 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “PhantomOperator” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 5 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · OVH SAS (AS16276)
Last checked: 2d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of freysaai.freysa.dev controls every word below.

metadata-audit

Audit an HTTP/HTTPS URL for metadata leaks: server/framework headers, author/generator meta tags, HTML comments, and third-party trackers.

threat-scan

Scan public web search results for PII exposure (phone numbers, emails, SSN patterns, physical addresses) linked to a full name.

breach-check

Keyless email breach intelligence lookup (XposedOrNot + HIBP) and optional k-anonymity SHA-1 password exposure check.

opsec-score

Multi-vector OPSEC exposure score (0-100, grade A-F) across web search, data brokers, paste sites, and social profiles, with prioritised remediation.

monero-opsec-audit

Cryptonote Base58 + Keccak-256 Monero ($XMR) address/subaddress decoder (Spend Key, View Key, network byte, checksum), live $XMR RingCT network telemetry, EVM <-> $XMR swap correlation check, and Merkle Mountain Range (MMR) commitment proof.

data-removal

Automated data-broker opt-out matcher (24+ brokers) + statutory CCPA § 1798.105 / GDPR Art. 17 / CA Delete Act legal erasure demand generator.

spam-caller-removal

Prepare official caller-ID unlisting and spam-label dispute steps for an authorized phone number across Truecaller, Hiya, RoboKiller, and Whitepages. Does not submit requests.

wallet-opsec-audit

On-chain Base/EVM wallet deanonymization & hygiene audit (nonce graph density, balance fingerprint, ERC-8004 identity check, and deterministic $XMR settlement subaddress).

full-privacy-sweep

End-to-end multi-operator privacy sweep: runs Threat Scan, OPSEC Exposure Score, Data Broker Removal dossier generation, and $XMR sovereign subaddress derivation.

cypherpunk-redteam-dossier

Comprehensive 6-operator Cypherpunk Red-Team Dossier: Web Metadata Audit + OSINT Threat Scan + Breach Check + OPSEC Score + EVM Wallet Hygiene + $XMR Monero Cryptonote Audit + MMR Cryptographic Attestation.

sovereign-opsec-retainer

Full-spectrum Enterprise & DAO Zero-Trace OPSEC Retainer Package: Multi-vector OSINT + Web Metadata + Credential Breach + Treasury EVM Clustering + $XMR Atomic-Swap Treasury Isolation Blueprint + Statutory CCPA/GDPR Takedown Binder.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: normancomics — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.1.0
Extensions: https://a2a-registry.org/extensions/registry/v1
Registry identity and Base-USDC x402 payment capabilities

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: extensions moneroCryptonoteAudit pushNotifications stateTransitionHistory streaming x402Payments
Agent card: https://freysaai.freysa.dev/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.