www.handlepay.org talked to 2 outside services on a first visit.E7E6
An AI agent used the site and saw 0 of 1 claimed features working.E105E106E107
Wallet connection: On /inbox, clicking "Other" opened a Privy sign-in window with email, Google, Twitter, "Other socials" and "Continue with a wallet" options. The wallet list showed 169 wallets, with Backpack visible, and loaded data from WalletConnect and Privy. Actually connecting a wallet or logging in is blocked in this sandbox, so I couldn't check whether a connection works.E105E106E107
Also noticed, Send form requires sign-in: The /send page has platform tabs (X, Twitch, YouTube, GitHub, Address), a handle field, an amount field and SOL/USDC choices. The submit button reads "Sign in to send", and the page footer says "Solana mainnet · Wallets by Privy".E104
Tech check: the site claims wallet connection, and its public page shows matching evidence.E101E14E15E16
We saw no known analytics or advertising services load on the first visit.E1
3 cookies were set in your browser, 3 of them by other companies' domains.E8E9E10
Its code can ask your wallet to sign structured data (logins, orders or off-chain approvals), send transactions and sign transactions. Read every wallet pop-up before approving.E65E66E69
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.
Couldn't test
Wallet connection
On /inbox, clicking "Other" opened a Privy sign-in window with email, Google, Twitter, "Other socials" and "Continue with a wallet" options. The wallet list showed 169 wallets, with Backpack visible, and loaded data from WalletConnect and Privy. Actually connecting a wallet or logging in is blocked in this sandbox, so I couldn't check whether a connection works.E105E106E107
Also noticed
Things the agent saw along the way that aren't among the site's claims. Not counted above.
Noticed
Send form requires sign-in
The /send page has platform tabs (X, Twitch, YouTube, GitHub, Address), a handle field, an amount field and SOL/USDC choices. The submit button reads "Sign in to send", and the page footer says "Solana mainnet · Wallets by Privy".E104
What it is
The Internet Archive has never saved this site, so it is probably new.E102
The site describes itself as: “Send SOL or USDC to any X, Twitch, YouTube or GitHub handle. They sign in with that account and it’s theirs.”E2
It's built with React (common tools for building web apps).E13
In your browser it can copy text to your clipboard and saves small bits of data in your browser.E20E21
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, web3.js, thirdweb and Phantom.E14E15E16E17E18E19
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E65
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E66
signTransaction: asks a wallet to sign transactions (often Solana wallets).E69
personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E64
eth_requestAccounts: asks to connect your wallet, which shows the site your address.E63
wallet_switchEthereumChain: asks your wallet to switch networks.E67
Chains named in the code: Base, Ethereum and Arbitrum One.E98E99E100
28 contract or wallet addresses are written into the code, including USDC on Ethereum and USDC on Base.E74E80
28 addresses found in the code
0x3085a8003f340cd51c72d9e1a1298cdafb171b020xd43d00981222a8db444a528e69f19e3ce5a7d2ff0x1de6b233984583f4d936ae4265f3b60282b70cc60x0d57c10249eb3a92b7d81bba6221f80f2865448a0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on 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
Paste any of these into the box on the home page to get the contract's report.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_signTypedData, eth_sendTransaction and signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E65E66E69
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, web3.js and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E14E15E16E17E18E19
Sign-in and account features show up in its code or traffic (/api/v1/custom_jwt_account/authenticate, /api/v1/custom_jwt_account/link, /api/v1/farcaster/authenticate and /api/v2/farcaster/authenticate).E27E28E30
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: handlepay · Send crypto to any handle
page title · https://www.handlepay.org/
E2
Page description: Send SOL or USDC to any X, Twitch, YouTube or GitHub handle. They sign in with that account and it’s theirs.
page description · https://www.handlepay.org/
E3
Main heading: Send crypto to any handle
page h1 · https://www.handlepay.org/
E4
1 request(s) to handlepay.org
types: 1 document
GET https://handlepay.org/ · document · network recording
E5
97 request(s) to www.handlepay.org
types: 76 script, 14 image, 2 stylesheet
GET https://www.handlepay.org/ · script · 97 requests · network recording
E6
2 request(s) to explorer-api.walletconnect.com
types: 2 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · fetch · 2 requests · network recording
E7
42 request(s) to auth.privy.io
types: 37 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmshfkijh00540dl5kfwomtwc · script · 42 requests · network recording
E8
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E9
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E10
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E11
localStorage: 4 key(s) saved in your browser
localStorage keys: privy:caid, base-acc-sdk.store, privy:sent:cmshfkijh00540dl5kfwomtwc:555, privy:connections · values not stored
E12
IndexedDB: 2 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB, base-acc-sdk · values not stored
The Internet Archive has no saved copy of handlepay.org
page web archive · https://web.archive.org/web/*/handlepay.org
E103
Agent step 1: view
AI agent step 1 · view on /
E104
Agent step 2: go /send
AI agent step 2 · go on /send · page called GET explorer-api.walletconnect.com/v3/wallets, GET auth.privy.io/api/v1/apps/cmshfkijh00540dl5kfwomtwc, HEAD www.handlepay.org/send
E105
Agent step 3: go /inbox
AI agent step 3 · go on /inbox · page called GET explorer-api.walletconnect.com/v3/wallets, GET auth.privy.io/api/v1/apps/cmshfkijh00540dl5kfwomtwc, HEAD www.handlepay.org/inbox
E106
Agent step 4: click Other
AI agent step 4 · click on /inbox
E107
Agent step 5: click Continue with a wallet
AI agent step 5 · click on /inbox
E108
Agent step 6: type Search through 169 wallets (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 6 · type on /inbox
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
The code reader hit its size budget on parts of 29 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 0iCAdA1J.
WELCOME TO TRENCHCOAT
1 of 3 · What it does
Know the coin before you buy it
Paste any coin address, wallet or X post. We scan it in seconds, free, no sign-up.
Every coin gets a green, yellow or red light and a score out of 100, and every point links to its source.
2 of 3 · How to read a check
Three questions, then the money
Is the tech real? Is the dev legit? Fair launch? Each has its own score and its top reasons.
Who's behind it: the dev's linked wallets, crews that buy launches together, and the launch block by who paid for it.
Money taken out: what the dev and launch-block wallets sold or pulled in the first 24 hours.
3 of 3 · Stay on it
Track coins and wallets
Press Track on any coin or wallet. You'll get a browser notification when the dev sells, liquidity is pulled, the price moves hard, or a tracked wallet trades.
No account: it's tied to this browser. See everything you track under Tracking.