trenchcoat
Free · no sign-up
Website report · 4 h ago

usegivest.app

“Givest”

Template-written 29 evidence items Code reader analysed 22 scripts
What this means for you

Givest talked to 2 outside services on a first visit.E6E7

  • An AI agent used the site and saw 0 of 2 claimed features working.E27E29
  • Wallet connection: The /claim page loaded and showed 'Waiting for a private link'. Claiming needs a real claim link, and sending needs Phantom ('Connect wallet to continue'), so neither flow could be run.E27E29
  • Trading / swaps / bots: Opening the NVDA send page made calls to lite-api.jup.ag price and quote and showed a live quote (0.0547 NVDA ≈ $10.01 via Jupiter, $183.04 per token). Running the actual SOL-to-xStock swap and locking it in a one-time wallet needs a wallet connection and payment.E27
  • Also noticed, Quote failed at $50: After switching the amount to $50, the page sent a new Jupiter quote request but showed 'No Jupiter route for this amount. Try a smaller size.'E28
  • Tech check: the site claims wallet connection and trading / swaps / bots, and its public page shows matching evidence.E23E24E22
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E22

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“…a private link. Claim Open the link. One tap. No fee. Phantom receives it. 1,507 xStocks on Solana NVDA AAPL TSLA MS…”E23

Wallet requests in its code: signTransactionE22

Evidence found

Trading / swaps / bots

“…prices via Jupiter Your Stock Drop, Faster and Clearer Swap SOL to a real xStock, lock it in a one-time wallet, an…”E24

Transaction requests to your wallet: signTransactionE22

Calls its own backend none seen
Wallet code signTransactionE22
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

The real tech may live elsewhere. This page links to: github.com/usegivest/givest · check the code

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 4 steps and saw 0 of 2 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Wallet connection

The /claim page loaded and showed 'Waiting for a private link'. Claiming needs a real claim link, and sending needs Phantom ('Connect wallet to continue'), so neither flow could be run.E27E29

Couldn't test

Trading / swaps / bots

Opening the NVDA send page made calls to lite-api.jup.ag price and quote and showed a live quote (0.0547 NVDA ≈ $10.01 via Jupiter, $183.04 per token). Running the actual SOL-to-xStock swap and locking it in a one-time wallet needs a wallet connection and payment.E27

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Quote failed at $50

After switching the amount to $50, the page sent a new Jupiter quote request but showed 'No Jupiter route for this amount. Try a smaller size.'E28

Noticed

Stock list size

The send page shows a search box for 1507 stocks and a 'More stocks (1483 left)' button. That matches the homepage's '1,507 xStocks' figure, not the '9 real xStocks' line elsewhere on the page.E27

What it is

  • The Internet Archive first saved this site on 2026-09-29 (38 days ago).E25
  • The site describes itself as: “Send real stock tokens on Solana as a claim link. Give stocks, not gift cards.”E2
  • It's built with Next.js and React (common tools for building web apps).E8E9
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E10E11
  • It has sections such as /send, /claim, /android, /updates and /_next/image.E20E21

Where your data goes

FontsDownload typefaces. 2
fonts.googleapis.comGoogle Fonts: fonts 1×E6
fonts.gstatic.comGoogle Fonts: fonts 1×E7

Crypto and wallets

  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E22

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E22

signTransaction

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/x/me and /api/auth/x/login).E13E18

/api/auth/x/me/api/auth/x/login

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E11

local_storage

Pages and API calls

Pages it links to

//send/claim/android/updates/_next/image

Endpoints

Called while loading (seen) or named in the code (code).

/api/auth/x/mecodeE13
/api/solana/configcodeE14
/api/attestcodeE15
/api/lockcodeE16
/api/rpccodeE17
/api/auth/x/logincodeE18
/api/ogcodeE19

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Givest
page title · https://usegivest.app/
E2
Page description: Send real stock tokens on Solana as a claim link. Give stocks, not gift cards.
page description · https://usegivest.app/
E3
Site name: Givest
page site_name · https://usegivest.app/
E4
Main heading: A New Way to Send Your Stock Tokens
page h1 · https://usegivest.app/
E5
59 request(s) to usegivest.app
types: 38 image, 15 script, 2 media
GET https://usegivest.app/ · image · 59 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
1 request(s) to fonts.gstatic.com
types: 1 font
GET https://fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 · font · network recording
E8
Next.js detected by the code reader (next-runtime)
confidence: high
usegivest.app/ · “next-runtime” · the code reader
E9
React detected by the code reader (react-runtime)
confidence: medium
usegivest.app/_next/static/chunks/255-5208c2893c942fa2.js · “react-runtime” · the code reader
E10
Uses the browser ability: clipboard_write
can copy text to your clipboard
usegivest.app/_next/static/chunks/app/page-deb73a27574332ce.js @ 1:10807 · “clipboard.writeText(” · pattern scan
E11
Uses the browser ability: local_storage
saves small bits of data in your browser
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:11648 · “localStorage.setItem(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:37421 · “getContext("2d"” · pattern scan
E13
Code reader found the endpoint /api/auth/x/me
how: call:fetch
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:8087 · “/api/auth/x/me” · the code reader
E14
Code reader found the endpoint /api/solana/config
how: call:fetch
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:10053 · “/api/solana/config” · the code reader
E15
Code reader found the endpoint /api/attest
how: call:fetch
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:10486 · “/api/attest” · the code reader
E16
Code reader found the endpoint /api/lock
how: call:fetch
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:10892 · “/api/lock” · the code reader
E17
The code names the endpoint /api/rpc
usegivest.app/_next/static/chunks/669-478ca98d058ad441.js @ 1:995 · “/api/rpc” · pattern scan
E18
The code names the endpoint /api/auth/x/login
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:30251 · “/api/auth/x/login” · pattern scan
E19
The code names the endpoint /api/og
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:34765 · “/api/og” · pattern scan
E20
5 links to pages on the same site
page links · https://usegivest.app/ · /, /send, /claim, /android, /updates
E21
Code reader found the route /_next/image
usegivest.app/_next/static/chunks/239-fdbe6f1f159b9f03.js @ 1:650 · “/_next/image” · the code reader
E22
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
usegivest.app/_next/static/chunks/app/send/page-1e255d3960ae9dd1.js @ 1:743 · “signAndSendTransaction” · pattern scan
E23
The site says: “…a private link. Claim Open the link. One tap. No fee. Phantom receives it. 1,507 xStocks on Solana NVDA AAPL TSLA MS…”
page text · https://usegivest.app/ · …a private link. Claim Open the link. One tap. No fee. Phantom receives it. 1,507 xStocks on Solana NVDA AAPL TSLA MS…
E24
The site says: “…prices via Jupiter Your Stock Drop, Faster and Clearer Swap SOL to a real xStock, lock it in a one-time wallet, an…”
page text · https://usegivest.app/ · …prices via Jupiter Your Stock Drop, Faster and Clearer Swap SOL to a real xStock, lock it in a one-time wallet, an…
E25
The Internet Archive first saved usegivest.app on 2026-09-29 and has snapshots from 2 different days
page web archive · https://web.archive.org/web/20260929044850/usegivest.app
E26
Agent step 1: view
AI agent step 1 · view on /
E27
Agent step 2: click NVDA
AI agent step 2 · click on /send · page called GET lite-api.jup.ag/price/v3, GET usegivest.app/api/auth/x/me, GET usegivest.app/, GET usegivest.app/claim, GET lite-api.jup.ag/swap/v1/quote
E28
Agent step 3: click $50
AI agent step 3 · click on /send · page called GET lite-api.jup.ag/swap/v1/quote
E29
Agent step 4: go /claim
AI agent step 4 · go on /claim · page called GET usegivest.app/, GET usegivest.app/send

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 9 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id BEZXbxHc.