Website report · 41 min ago

furax.fun

“FURAX, Solana token risk scanner”

Template-written 28 evidence items Code reader analysed 19 scripts
What this means for you

furax.fun talked to 3 outside services on a first visit, including 1 that measures visits or shows ads.E5

  • An AI agent used the site and saw 1 of 1 claimed features working.E27E28
  • On-chain / smart contracts: Jupiter organic score/verification and Pump.fun on-chain bonding curve data sources: I opened the report for a trending pump.fun token. The page called /api/scan and showed a Jupiter organic score of 75 with "Unverified" status, plus a bonding curve field reading "Graduated from bonding curve 0.0%" next to a pool table with LP lock percentages. The home page lists response times per source, but the numbers changed from the quoted ones (Jupiter 31 ms, Pump.fun 173 ms at the time ofE27E28
  • Also noticed, AI explanation disabled: The site says Claude explains each report. On the token report, the "Ask about RAM" section said questions turn on only once ANTHROPIC_API_KEY is set on the server, even though the page made a POST to /api/ai.E28
  • Also noticed, Token report loads live data: The token report showed a score of 88, data coverage of 100%, price, market cap, liquidity, holders, buy and sell counts, and a chart from /api/chart. It also listed findings such as volume to liquidity being 161.7x.E28
  • Tech check: the site claims on-chain / smart contracts, and its public page shows matching evidence.E25E7E6
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E5

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…60 ms JupiterOrganic score, verification40 ms Pump.fun on-chainBonding curve28 ms Before you trust a score Does a high…”E25

Blockchain services it contacts: CoinGecko / GeckoTerminalE7E6

Calls its own backend /api/market, /api/site, /api/radarE14E15E16E17
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE13

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 2 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

On-chain / smart contracts: Jupiter organic score/verification and Pump.fun on-chain bonding curve data sources

I opened the report for a trending pump.fun token. The page called /api/scan and showed a Jupiter organic score of 75 with "Unverified" status, plus a bonding curve field reading "Graduated from bonding curve 0.0%" next to a pool table with LP lock percentages. The home page lists response times per source, but the numbers changed from the quoted ones (Jupiter 31 ms, Pump.fun 173 ms at the time ofE27E28

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

AI explanation disabled

The site says Claude explains each report. On the token report, the "Ask about RAM" section said questions turn on only once ANTHROPIC_API_KEY is set on the server, even though the page made a POST to /api/ai.E28

Noticed

Token report loads live data

The token report showed a score of 88, data coverage of 100%, price, market cap, liquidity, holders, buy and sell counts, and a chart from /api/chart. It also listed findings such as volume to liquidity being 161.7x.E28

What it is

  • The Internet Archive has never saved this site, so it is probably new.E26
  • The site describes itself as: “Paste a Solana token. FURAX combines RugCheck, GoPlus, Dexscreener, GeckoTerminal, CoinGecko, Jupiter, and on-chain pump.fun data into one r”E2
  • It's built with Next.js and React (common tools for building web apps).E9E10
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and keeps a live two-way connection open to a server.E11E12E13
  • It has sections such as /radar, /method and /token.E24
  • While loading, it called 4 endpoints on its own servers, such as /api/market, /api/site, /api/radar and 1 more.E14E15E16E17

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E5
Crypto & walletsConnect wallets, read blockchains or fetch token prices. 2
coin-images.coingecko.comCoinGecko / GeckoTerminal: token prices and pools 12×E7
assets.geckoterminal.comCoinGecko / GeckoTerminal: token prices and pools 9×E6

How key features work

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E13

websocket

Loading its content

Its content loads from its own API while you browse (/api/market, /api/site, /api/radar and /api/health).E14E15E16E17

/api/market/api/site/api/radar/api/health

Search

Search runs through /api/search.E23

/api/search

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E5

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage and sessionStorage), so some things persist between visits.E12E8

local_storagesessionStorage

Cookies and storage

Names only. We never store the values.

sessionStorageE8: furax:intro

Pages and API calls

Pages it links to

//radar/method/token

Endpoints

Called while loading (seen) or named in the code (code).

furax.fun/api/marketseenE14
furax.fun/api/siteseenE15
furax.fun/api/radarseenE16
furax.fun/api/healthseenE17
/api/marketcodeE18
/api/sitecodeE19
/api/healthcodeE20
/api/radarcodeE21
pumpportal.fun/api/datacodeE22
/api/searchcodeE23

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: FURAX, Solana token risk scanner
page title · https://furax.fun/
E2
Page description: Paste a Solana token. FURAX combines RugCheck, GoPlus, Dexscreener, GeckoTerminal, CoinGecko, Jupiter, and on-chain pump.fun data into one risk score,
page description · https://furax.fun/
E3
Main heading: See the trap before you buy.
page h1 · https://furax.fun/
E4
45 request(s) to furax.fun
types: 25 fetch, 15 script, 3 font
GET https://furax.fun/ · fetch · 45 requests · network recording
E5
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E6
9 request(s) to assets.geckoterminal.com
types: 9 image
GET https://assets.geckoterminal.com/5sjx5bl9m4w8lkd8h39llu83mncp · image · 9 requests · network recording
E7
12 request(s) to coin-images.coingecko.com
types: 12 image
GET https://coin-images.coingecko.com/coins/images/102179093/large/jean_phil.jpg · image · 12 requests · network recording
E8
sessionStorage: 1 key(s) saved in your browser
sessionStorage keys: furax:intro · values not stored
E9
Next.js detected by the code reader (next-runtime)
confidence: high
furax.fun/ · “next-runtime” · the code reader
E10
React detected by the code reader (react-runtime)
confidence: medium
furax.fun/_next/static/chunks/3x-m0tlcdc2af.js · “react-runtime” · the code reader
E11
Uses the browser ability: clipboard_write
can copy text to your clipboard
furax.fun/_next/static/chunks/2sa0dorz8wr7j.js @ 1:40984 · “clipboard.writeText(” · pattern scan
E12
Uses the browser ability: local_storage
saves small bits of data in your browser
furax.fun/_next/static/chunks/3_5torz72x9xn.js @ 1:7023 · “localStorage.setItem(” · pattern scan
E13
Uses the browser ability: websocket
keeps a live two-way connection open to a server
furax.fun/_next/static/chunks/3_5torz72x9xn.js @ 1:2301 · “new WebSocket(” · pattern scan
E14
The page called /api/market on furax.fun (GET)
GET https://furax.fun/api/market · fetch · network recording
E15
The page called /api/site on furax.fun (GET)
GET https://furax.fun/api/site · fetch · network recording
E16
The page called /api/radar on furax.fun (GET)
GET https://furax.fun/api/radar · fetch · network recording
E17
The page called /api/health on furax.fun (GET)
GET https://furax.fun/api/health · fetch · network recording
E18
Code reader found the endpoint /api/market
how: call:fetch
furax.fun/_next/static/chunks/0irotp71p7gfi.js @ 1:17788 · “/api/market” · the code reader
E19
Code reader found the endpoint /api/site
how: call:fetch
furax.fun/_next/static/chunks/0irotp71p7gfi.js @ 1:21198 · “/api/site” · the code reader
E20
Code reader found the endpoint /api/health
how: call:fetch
furax.fun/_next/static/chunks/15x07bh72vh03.js @ 1:35430 · “/api/health” · the code reader
E21
Code reader found the endpoint /api/radar
how: call:fetch
furax.fun/_next/static/chunks/15x07bh72vh03.js @ 1:48053 · “/api/radar” · the code reader
E22
Code reader found the endpoint pumpportal.fun/api/data
how: call:WebSocket
furax.fun/_next/static/chunks/3_5torz72x9xn.js @ 1:2300 · “pumpportal.fun/api/data” · the code reader
E23
The code names the endpoint /api/search
furax.fun/_next/static/chunks/15x07bh72vh03.js @ 1:44188 · “/api/search” · pattern scan
E24
20 links to pages on the same site
page links · https://furax.fun/ · /, /radar, /method, /token
E25
The site says: “…60 ms JupiterOrganic score, verification40 ms Pump.fun on-chainBonding curve28 ms Before you trust a score Does a high…”
page text · https://furax.fun/ · …60 ms JupiterOrganic score, verification40 ms Pump.fun on-chainBonding curve28 ms Before you trust a score Does a high…
E26
The Internet Archive has no saved copy of furax.fun
page web archive · https://web.archive.org/web/*/furax.fun
E27
Agent step 1: view
AI agent step 1 · view on /
E28
Agent step 2: click RAM $97.21K +60.77%
AI agent step 2 · click on /token/6QUHcqYuiPRHxhnYZoygewXtNQr9kUrhc9Tmwgtbpump · page called GET furax.fun/token/6QUHcqYuiPRHxhnYZoygewXtNQr9kUrhc9Tmwgtbpump, GET furax.fun/api/scan/6QUHcqYuiPRHxhnYZoygewXtNQr9kUrhc9Tmwgtbpump, POST furax.fun/api/ai, GET furax.fun/api/chart

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 9 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 5xGdp25y.