trenchcoat
Free · no sign-up
Website report · 16 min ago

mihao.fun

“MIHAO — The cat has arrived”

Template-written 23 evidence items Code reader analysed 3 scripts
What this means for you

mihao.fun talked to 3 outside services on a first visit.E5E6E7

  • An AI agent used the site and saw 1 of 1 claimed features working.E18E19E20E22
  • On-chain / smart contracts: The homepage shows the Solana contract address 4CxjZyMNoF1p6eXHXHv1TWpS2X47CuUmLwtGe18spump and links it to pump.fun. Clicking the COPY button timed out. On the ecosystem page, the site queried the Dexscreener API for that address. After I clicked Refresh, it showed live pool data: 103 paired tokens, 17 DEX pools and $640.0K in 24h pair volume (marked partial and cached), so the address is listed E18E19E20E22
  • Also noticed, Ecosystem dashboard loads live pair data: After Refresh, the ecosystem page called Dexscreener, Jupiter and an external index at mihao-ecosystem-index.eskere33.chatgpt.site. It then listed paired tokens with market caps, 24h volumes and chart links. Some values were marked cached or still loading.E20E21E22
  • Also noticed, Ecosystem search box not tested: The testing sandbox blocked typing into the ecosystem page's search field, so I could not test the search.E23
  • Tech check: the site mentions on-chain / smart contracts, but we found nothing behind it in what its public page loads.E16
  • We saw no known analytics or advertising services load on the first visit.E1
  • 3 cookies were set in your browser, all by the site itself.E8E9E10

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

On-chain / smart contracts

“…/ FIND THE CAT好運隨行 ✦ ON SOLANA FIND $MIHAO THE CAT IS ONCHAIN. Find $MIHAO on Solana. Copy the contract address belo…”E16

No matching code, calls or services in what loaded for us.

Calls its own backend /assets/collections.jsonE14
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

On-chain / smart contracts

The homepage shows the Solana contract address 4CxjZyMNoF1p6eXHXHv1TWpS2X47CuUmLwtGe18spump and links it to pump.fun. Clicking the COPY button timed out. On the ecosystem page, the site queried the Dexscreener API for that address. After I clicked Refresh, it showed live pool data: 103 paired tokens, 17 DEX pools and $640.0K in 24h pair volume (marked partial and cached), so the address is listed E18E19E20E22

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Ecosystem dashboard loads live pair data

After Refresh, the ecosystem page called Dexscreener, Jupiter and an external index at mihao-ecosystem-index.eskere33.chatgpt.site. It then listed paired tokens with market caps, 24h volumes and chart links. Some values were marked cached or still loading.E20E21E22

Noticed

Ecosystem search box not tested

The testing sandbox blocked typing into the ecosystem page's search field, so I could not test the search.E23

What it is

  • The Internet Archive has never saved this site, so it is probably new.E17
  • The site describes itself as: “A little corner of the internet for Ni Hao Cat. Explore the memes, find your PFP, and stay a while.”E2
  • Notable building blocks in its code: Three.js (3D graphics).E11
  • In your browser it can copy text to your clipboard.E12
  • It has sections such as /ecosystem.html, /memes.html and /assets.E15
  • While loading, it called 1 endpoint on its own servers, such as /assets/collections.json.E14

Where your data goes

FontsDownload typefaces. 2
fonts.googleapis.comGoogle Fonts: fonts 1×E5
fonts.gstatic.comGoogle Fonts: fonts 1×E6
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
cdn.jsdelivr.netjsDelivr: open-source file CDN 3×E7

How key features work

Loading its content

Its content loads from its own API while you browse (/assets/collections.json).E14

/assets/collections.json

Drawing and editing in the browser

The page draws and edits graphics in your browser using Three.js (3D graphics) and the canvas.E11E13

Three.js (3D graphics)canvas

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__Host-appgarden-visitorE8mihao.fun about 90 daysthe site
cf_clearanceE9mihao.fun about 365 daysthe site
__cf_bmE10mihao.fun about 0 daysthe site

Pages and API calls

Pages it links to

//ecosystem.html/memes.html/assets

Endpoints

Called while loading (seen) or named in the code (code).

mihao.fun/assets/collections.jsonseenE14

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: MIHAO — The cat has arrived
page title · https://mihao.fun/
E2
Page description: A little corner of the internet for Ni Hao Cat. Explore the memes, find your PFP, and stay a while.
page description · https://mihao.fun/
E3
Main heading: $MIHAO
page h1 · https://mihao.fun/
E4
23 request(s) to mihao.fun
types: 12 image, 4 stylesheet, 3 script
GET https://mihao.fun/ · image · 23 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
1 request(s) to fonts.gstatic.com
types: 1 font
GET https://fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 · font · network recording
E7
3 request(s) to cdn.jsdelivr.net
types: 3 script
GET https://cdn.jsdelivr.net/npm/three@0.170.0/build/three.module.js · script · 3 requests · network recording
E8
Cookie '__Host-appgarden-visitor' set for mihao.fun
kept for about 90 days
cookie __Host-appgarden-visitor on mihao.fun · value not stored
E9
Cookie 'cf_clearance' set for mihao.fun
kept for about 365 days
cookie cf_clearance on mihao.fun · value not stored
E10
Cookie '__cf_bm' set for mihao.fun
kept for about 0 days
cookie __cf_bm on mihao.fun · value not stored
E11
Three.js (3D graphics) found in the code
mihao.fun/ (page HTML) @ 8:98 · “three.module” · pattern scan
E12
Uses the browser ability: clipboard_write
can copy text to your clipboard
mihao.fun/app.js @ 14:25 · “clipboard.writeText(” · pattern scan
E13
Uses the browser ability: canvas
draws graphics on a canvas
mihao.fun/app.js @ 104:27 · “getContext('2d'” · pattern scan
E14
The page called /assets/collections.json on mihao.fun (GET)
GET https://mihao.fun/assets/collections.json · fetch · network recording
E15
4 links to pages on the same site
page links · https://mihao.fun/ · /, /ecosystem.html, /memes.html, /assets
E16
The site says: “…/ FIND THE CAT好運隨行 ✦ ON SOLANA FIND $MIHAO THE CAT IS ONCHAIN. Find $MIHAO on Solana. Copy the contract address belo…”
page text · https://mihao.fun/ · …/ FIND THE CAT好運隨行 ✦ ON SOLANA FIND $MIHAO THE CAT IS ONCHAIN. Find $MIHAO on Solana. Copy the contract address belo…
E17
The Internet Archive has no saved copy of mihao.fun
page web archive · https://web.archive.org/web/*/mihao.fun
E18
Agent step 1: view
AI agent step 1 · view on /
E19
Agent step 2: click COPY ↗ (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 2 · click on /
E20
Agent step 3: go /ecosystem.html
AI agent step 3 · go on /ecosystem · page called GET api.dexscreener.com/token-pairs/v1/solana/4CxjZyMNoF1p6eXHXHv1TWpS2X47CuUmLwtGe18spump, GET mihao-ecosystem-index.eskere33.chatgpt.site/api/ecosystem
E21
Agent step 4: view
AI agent step 4 · view on /ecosystem
E22
Agent step 5: click REFRESH ↻
AI agent step 5 · click on /ecosystem · page called GET api.dexscreener.com/token-pairs/v1/solana/4CxjZyMNoF1p6eXHXHv1TWpS2X47CuUmLwtGe18spump, GET mihao-ecosystem-index.eskere33.chatgpt.site/api/ecosystem, GET api.dexscreener.com/token-pairs/v1/solana/GRYr6941adZJhYfyLu9NSi84r22voD2cHLbW3xMcpfK, GET api.jup.ag/tokens/v2/search
E23
Agent step 6: type Search name, ticker or address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 6 · type on /ecosystem

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 3wzfjyQo.