hypepay.org talked to 4 outside services on a first visit.E8E7E6E5
Tech check: the site claims wallet connection, and its public page shows matching evidence.E154E18E19E20
We saw no known analytics or advertising services load on the first visit.E1
4 cookies were set in your browser, all by the site itself.E9E10E11E12
Its code can ask your wallet to approve token spending, sign structured data (logins, orders or off-chain approvals), send transactions, send batches of transactions and 1 more. Read every wallet pop-up before approving.E120E114E115E119E121
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
Wallet connection
“…card details, balances and top-ups, all in one portal. Connect wallet Add your card to Minimum deposit: $20 worth of SOL. St…”E154
Wallet libraries in its code: WalletConnect / Reown, viem, Coinbase Wallet SDKE18E19E20E21
Wallet requests in its code: approve, eth_signTypedData, eth_sendTransactionE120E114E115E119
Calls its own backend/api/pumppay/session, /api/__clerk/v1/environment, /api/__clerk/v1/clientE28E29E30
Contract calls in its codeaggregate3, isValidSignature, isValidSigE122E123E124E125
Talks to AI servicesnone seen
Live connectionskeeps a live two-way connection open to a serverE25
What it is
The Internet Archive has never saved this site, so it is probably new.E155
The site describes itself as: “Connect your Solana wallet, deposit SOL and issue a virtual payment card through KripiCard. Manage card details, balances, transactions and ”E2
It's built with React (common tools for building web apps).E14
In your browser it saves small bits of data in your browser and keeps a live two-way connection open to a server.E24E25
It has sections such as /docs, /sign-in, /sign-up, account, security and billing.E75E76
While loading, it called 3 endpoints on its own servers, such as /api/pumppay/session, /api/__clerk/v1/environment and /api/__clerk/v1/client.E28E29E30
Our sandbox blocked requests to 1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyce-p.client.protect.clerk.com because they pointed to private or internal addresses.
Crypto and wallets
Wallet tools in the code: WalletConnect / Reown, viem, Coinbase Wallet SDK, thirdweb, Phantom and EIP-6963 wallet discovery.E18E19E20E21E22E23
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E120
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E114
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E115
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E119
signTransaction: asks a wallet to sign transactions (often Solana wallets).E121
personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E113
Contract functions the app calls by name: aggregate3, isValidSignature, isValidSig, query, addr, resolveWithGateways, tokenURI, uri and 16 more.E122E123E124E125E126E127
Chains named in the code: Ethereum and Sepolia.E152E153
6 contract or wallet addresses are written into the code, including Multicall3 (batches read calls).E147
Paste any of these into the box on the home page to get the contract's report.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for approve, eth_signTypedData, eth_sendTransaction, wallet_sendCalls and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E120E114E115E119E121E122
It connects to crypto wallets using WalletConnect / Reown, viem, Coinbase Wallet SDK, thirdweb and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E18E19E20E21E22E23
It reads blockchain data (Ethereum and Sepolia) to show balances, prices or contract state.E152E153
EthereumSepolia
Sign-in and accounts
Sign-in and account features show up in its code or traffic (/api/pumppay/session, /me/sessions/active, /me/oauth/device/lookup, /me/oauth/device and 3 more).E28E35E37E8E7E15
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: HypePay | Virtual cards funded with SOL
page title · https://hypepay.org/
E2
Page description: Connect your Solana wallet, deposit SOL and issue a virtual payment card through KripiCard. Manage card details, balances, transactions and top-ups in
page description · https://hypepay.org/
E3
Main heading: Your SOL, on a card.
page h1 · https://hypepay.org/
E4
20 request(s) to hypepay.org
types: 9 script, 3 fetch, 3 image
GET https://hypepay.org/ · script · 20 requests · network recording
E5
2 request(s) to i.replit.com
types: 1 script, 1 fetch
GET https://i.replit.com/script.js · script · 2 requests · network recording
E6
1 request(s) to cdn.protect.clerk.com
types: 1 script
GET https://cdn.protect.clerk.com/ins_3KbaegjFFjPSGPvYW1SwsCoZwD4/c/1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyc… · script · network recording
E7
1 request(s) to 1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyce-l.client.protect.clerk.com
types: 1 script
GET https://1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyce-l.client.protect.clerk.com/ins_3KbaegjFFjPSGPvYW1SwsCoZwD4/loader.js · script · network recording
E8
10 request(s) to 1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyce-p.client.protect.clerk.com
types: 10 fetch
GET https://1-lj2znw22oscjauvq4wawdqzhtm-ne434ib7cjkma2h5elpompwyce-p.client.protect.clerk.com/ins_3KbaegjFFjPSGPvYW1SwsCoZwD4/probe · fetch · 10 requests · network recording
E9
Cookie 'GAESA' set for hypepay.org
kept for about 30 days
cookie GAESA on hypepay.org · value not stored
E10
Cookie '__client' set for hypepay.org
kept for about 400 days
cookie __client on hypepay.org · value not stored
E11
Cookie '__client_uat' set for hypepay.org
kept for about 400 days
cookie __client_uat on hypepay.org · value not stored
E12
Cookie '__client_uat_Lkyl53Vu' set for hypepay.org
kept for about 400 days
cookie __client_uat_Lkyl53Vu on hypepay.org · value not stored
E13
localStorage: 3 key(s) saved in your browser
localStorage keys: __clerk_environment, __clerk_protect_pid, __clerk_protect_st · values not stored
E14
React detected by the code reader (react-runtime)
confidence: medium
hypepay.org/api/__clerk/npm/@clerk/ui@1.42.0/dist/framework_ui_8f3fa6_1.42.0.js · “react-runtime” · the code reader
The site says: “…card details, balances and top-ups, all in one portal. Connect wallet Add your card to Minimum deposit: $20 worth of SOL. St…”
page text · https://hypepay.org/ · …card details, balances and top-ups, all in one portal. Connect wallet Add your card to Minimum deposit: $20 worth of SOL. St…
E155
The Internet Archive has no saved copy of hypepay.org
page web archive · https://web.archive.org/web/*/hypepay.org
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
The code reader hit its size budget on parts of 6 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 82wFM9y2.
Paste a coin address, a ticker, a wallet or an X post. The scan takes seconds, it's free, and there's no sign-up.
Every coin gets a green, yellow or red light with a score out of 100. Every point links to its source.
Is the tech real?90
Is the dev legit?40
Fair launch?20
2 of 4 · How to read a coin
Three questions, then the money
Tech, dev, launch: each has its own score and its top reasons, and the weakest one sets the light.
Who's behind it: the dev's linked wallets, crews that buy launches together, and who paid for the launch block.
Money taken out: what the dev and the launch-block wallets sold or pulled in the first 24 hours.
X@trenchinspector + CATelegram/s CADiscord/check CA
3 of 4 · Use it where you trade
Ask from X, Telegram or Discord
X: tag @trenchinspector with a coin address and it replies with the light and why.
Telegram and Discord: add the bot to your group and send a coin address.
Pulse: new launches appear about a second after they go live, and each one gets a light once it's scanned.
$COIN · dev sold 4.2%liquidity −40% in 10 min
4 of 4 · Stay on it
Track coins and wallets
Press Track on any coin or wallet. You'll get a browser notification when the dev sells, liquidity is pulled, the price moves hard, or a tracked wallet trades.
No account needed. Tracking is tied to this browser. See it all under Tracking.