pumpotc.live talked to 1 outside service on a first visit.E5
An AI agent used the site and saw 0 of 1 claimed features working.E38
Wallet connection: Clicking 'Connect wallet' opened a 'Connect a wallet' dialog that said no wallet was detected and offered download links for Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this sandbox, so the connection itself could not be tried.E38
Also noticed, Market table and token search respond: The Markets table lists 12 tokens with prices labelled as coming from CoinGecko. Typing 'JUP' into the search box narrowed the table to the Jupiter row only, and the page called /api/p2p/state.E37E41
Also noticed, Offer book is empty: The open offers section shows 0 public offers, 0 SOL bid or asked and 0 settled trades, with the message 'The desk is quiet'.E37
Tech check: the site claims wallet connection, and its public page shows matching evidence.E35E8E33E34
We saw no known analytics or advertising services load on the first visit.E1
1 cookie was set in your browser, all by the site itself.E6
Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E33
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
Wallet connection
“OTC/Home SOL $87.14 -2.46% Connect wallet CAHX1N9ji8KYAFDFqJiD8YhHDetH6CDMj8qEHe1YG7xotc @otc_la…”E35
Wallet libraries in its code: WalletConnect / ReownE8
Wallet requests in its code: signTransaction, signMessageE33E34
Calls its own backend/api/market-prices, /api/p2p/stateE11E12
An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.
Couldn't test
Wallet connection
Clicking 'Connect wallet' opened a 'Connect a wallet' dialog that said no wallet was detected and offered download links for Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this sandbox, so the connection itself could not be tried.E38
Also noticed
Things the agent saw along the way that aren't among the site's claims. Not counted above.
Noticed
Market table and token search respond
The Markets table lists 12 tokens with prices labelled as coming from CoinGecko. Typing 'JUP' into the search box narrowed the table to the Jupiter row only, and the page called /api/p2p/state.E37E41
Noticed
Offer book is empty
The open offers section shows 0 public offers, 0 SOL bid or asked and 0 settled trades, with the message 'The desk is quiet'.E37
What it is
The Internet Archive has never saved this site, so it is probably new.E36
The site describes itself as: “A direct two-wallet OTC desk for large Solana token holders. Negotiate offers and co-sign atomic swaps.”E2
It's built with React (common tools for building web apps).E7
In your browser it can copy text to your clipboard and saves small bits of data in your browser.E9E10
It has sections such as /positions, /new, /bags, /add, /docs and /risk.E26E27
While loading, it called 2 endpoints on its own servers, such as /api/market-prices and /api/p2p/state.E11E12
Where your data goes
Not identifiedServices we don't have in our list yet.1
Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E33
signTransaction
Connecting your wallet
It connects to crypto wallets using WalletConnect / Reown, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E8
WalletConnect / ReownsignTransactionsignMessage
Sign-in and accounts
Sign-in and account features show up in its code or traffic (/api/p2p/session).E20
/api/p2p/session
Loading its content
Its content loads from its own API while you browse (/api/market-prices and /api/p2p/state).E11E12
/api/market-prices/api/p2p/state
Saving data on your device
It saves data in your browser (localStorage), so some things persist between visits.E10
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: OTC | Direct Solana OTC desk
page title · https://pumpotc.live/
E2
Page description: A direct two-wallet OTC desk for large Solana token holders. Negotiate offers and co-sign atomic swaps.
page description · https://pumpotc.live/
E3
Main heading: Buy the bag. Sell the bag.
Skip the pool.
page h1 · https://pumpotc.live/
E4
19 request(s) to pumpotc.live
types: 13 image, 3 fetch, 1 document
GET https://pumpotc.live/ · image · 19 requests · network recording
E5
2 request(s) to i.replit.com
types: 1 script, 1 fetch
GET https://i.replit.com/script.js · script · 2 requests · network recording
E6
Cookie 'GAESA' set for pumpotc.live
kept for about 30 days
cookie GAESA on pumpotc.live · value not stored
E7
React detected by the code reader (react-runtime)
confidence: medium
pumpotc.live/assets/index-DZQmHHab.js · “react-runtime” · the code reader
AI agent step 3 · click on / · page called GET pumpotc.live/api/p2p/state
E40
Agent step 4: click Close wallet dialog
AI agent step 4 · click on /
E41
Agent step 5: type Search ticker, name or mint ← “JUP”
AI agent step 5 · type on / · page called GET pumpotc.live/api/p2p/state
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 3Cda8zIE.
Paste a coin address, a ticker, a wallet or an X post. The scan takes seconds, it's free, and there's no sign-up.
Every coin gets a green, yellow or red light with a score out of 100. Every point links to its source.
Is the tech real?90
Is the dev legit?40
Fair launch?20
2 of 4 · How to read a coin
Three questions, then the money
Tech, dev, launch: each has its own score and its top reasons, and the weakest one sets the light.
Who's behind it: the dev's linked wallets, crews that buy launches together, and who paid for the launch block.
Money taken out: what the dev and the launch-block wallets sold or pulled in the first 24 hours.
X@trenchinspector + CATelegram/s CADiscord/check CA
3 of 4 · Use it where you trade
Ask from X, Telegram or Discord
X: tag @trenchinspector with a coin address and it replies with the light and why.
Telegram and Discord: add the bot to your group and send a coin address.
Pulse: new launches appear about a second after they go live, and each one gets a light once it's scanned.
$COIN · dev sold 4.2%liquidity −40% in 10 min
4 of 4 · Stay on it
Track coins and wallets
Press Track on any coin or wallet. You'll get a browser notification when the dev sells, liquidity is pulled, the price moves hard, or a tracked wallet trades.
No account needed. Tracking is tied to this browser. See it all under Tracking.
