zora.co

• The site describes itself as: “A social network for the agentic age where taste, timing, and conviction are the edge.”E2
• It's built with Next.js, React and Preact (common tools for building web apps).E28E29E30
• Notable building blocks in its code: GraphQL client and tRPC.E31E32
• In your browser it can ask to use your camera or microphone, can copy text to your clipboard, stores data in your browser's built-in database, saves small bits of data in your browser and 2 more.E47E48E49E50E51E52
• It has sections such as /en, /home-feed, /conversations, /token, /404 and /500.E103E104
• While loading, it called 8 endpoints on its own servers, such as /z-ingest/flags/, /api/v1/apps/clpgf04wn04hnkw0fv1m11mnb, /universal/graphql and 5 more.E55E56E57E58

Our sandbox blocked requests to use1-turn.fpjs.io because they pointed to private or internal addresses.

• Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, wagmi, viem, ethers.js, Coinbase Wallet SDK and 3 more.E38E39E40E41E42E43
• eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E167
• approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E174
• setApprovalForAll: has code to ask for approval over a whole NFT collection.E175
• permit: has code for a 'permit' signature: a token approval given by signing instead of a transaction.E176
• eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E168
• eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E169
• Contract functions the app calls by name: balanceOf, symbol, decimals, transfer, safeBatchTransferFrom, allowance, approve, execute and 22 more.E178E179E180E181E182E183
• Chains named in the code: Arbitrum One, Base, BNB Smart Chain, Ethereum, OP Mainnet, Sepolia, Zora, Zora Sepolia and 12 more.E238E239E240E241E242E243
• 30 contract or wallet addresses are written into the code, including USDC on Base, WETH on Base / OP chains and WETH on Ethereum.E208E221E223

Names only. We never store the values.

localStorageE25: @appkit/connection_status, zora-discover-14-03-23, zora-avatar-versions, privy:caid, ph_phc_xYdwxHKM5QPE7umQJspxjdkUcseTo9m1iwWsojeInyP_posthog, @appkit/active_caip_network_id, wagmi.store, user_session, privy:connections, @appkit/active_namespace, privy:sent:clpgf04wn04hnkw0fv1m11mnb:3478687436157682, messaging_active_tab_id, last-page-visited, @appkit/disconnected_connector_ids, utm_source

sessionStorageE26: ph_phc_xYdwxHKM5QPE7umQJspxjdkUcseTo9m1iwWsojeInyP_primary_window_exists, utm_app_open_fired, ph_phc_xYdwxHKM5QPE7umQJspxjdkUcseTo9m1iwWsojeInyP_posthog

IndexedDBE27: WALLET_CONNECT_V2_INDEXED_DB

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

• We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
• Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
• Some trackers only load after you accept cookies or log in, so the real list can be longer.
• We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
• The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
• This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
• REA hit its size budget on parts of 49 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id Bd4i9GyP.