trenchcoat
Free · no sign-up
Website report · 1 h ago

usestockz.xyz

“STOCKZ: coins that pay their holders in stocks”

Template-written 42 evidence items Code reader analysed 4 scripts
What this means for you

usestockz.xyz talked to 8 outside services on a first visit.E6E5E9E10

  • An AI agent used the site and saw 0 of 3 claimed features working.E35E36E39E37E38
  • On-chain / smart contracts: The home page and /proof ledger loaded their numbers from /api/stats and /api/proof. They showed 0.000 SOL collected, 0 SOL sent, "No transactions yet" and 0 coins on /coins, so there were no on-chain payments to check. The only on-chain item is a payout wallet address linked to Solscan, which the site lists as holding 0.0500 SOL.E35E36E39
  • Wallet connection: Clicking Connect wallet opened a dialog saying no Solana wallet was found in this browser and suggesting Phantom or Solflare. Connecting a wallet is outside what this sandbox can do.E37
  • Trading / swaps / bots: The swap step is described in the published engine/desk.py source (Jupiter swaps on a 3-minute payout cycle). The ledger listed no swap, claim or payout transactions, and network fees showed 0.000000 SOL, so no swap activity was visible.E36E38
  • Tech check: the site claims on-chain / smart contracts, wallet connection and trading / swaps / bots, and its public page shows matching evidence.E31E32E30
  • We saw no known analytics or advertising services load on the first visit.E1
  • 1 cookie was set in your browser, 1 of them by other companies' domains.E13
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E30

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…STOCKZ keeps nothing, and every payment can be checked on chain. Launch a coin Creator fees Collected so far0.000 SOL…”E31

Wallet requests in its code: signTransactionE30

Evidence found

Wallet connection

“…t payout round in 0:25 CAAYVQ28…gWpumpAYVQ…pump Launch Connect wallet Copy address My payouts Disconnect Launch a coin that…”E32

Wallet requests in its code: signTransactionE30

Evidence found

Trading / swaps / bots

“…SOL0% of collected Paid to the network for the claim, swap and payout transactions. + Waiting for the next round0…”E33

Transaction requests to your wallet: signTransactionE30

Calls its own backend /api/config, /api/stats, /assets/catalog.jsonE18E19E20E21
Wallet code signTransactionE30
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 8 steps and saw 0 of 3 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Not seen working

On-chain / smart contracts

The home page and /proof ledger loaded their numbers from /api/stats and /api/proof. They showed 0.000 SOL collected, 0 SOL sent, "No transactions yet" and 0 coins on /coins, so there were no on-chain payments to check. The only on-chain item is a payout wallet address linked to Solscan, which the site lists as holding 0.0500 SOL.E35E36E39

Couldn't test

Wallet connection

Clicking Connect wallet opened a dialog saying no Solana wallet was found in this browser and suggesting Phantom or Solflare. Connecting a wallet is outside what this sandbox can do.E37

Not seen working

Trading / swaps / bots

The swap step is described in the published engine/desk.py source (Jupiter swaps on a 3-minute payout cycle). The ledger listed no swap, claim or payout transactions, and network fees showed 0.000000 SOL, so no swap activity was visible.E36E38

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Source code viewer with file hashes

The /source page loaded 10 engine files through /api/source, with a SHA-256 fingerprint for each. It showed readable Python for the payout desk, which says it runs in dry mode by default (DIVIDEND_DRY=1).E38

Noticed

Launch form loads asset and pair lists

The /launch page fetched catalog.json and /api/pairs and showed a coin form with 230 selectable trading pairs. Actually launching a coin needs a wallet signature.E42

What it is

  • The Internet Archive has never saved this site, so it is probably new.E34
  • The site describes itself as: “Launch a pump.fun coin whose creator fees are paid to its holders in stocks or crypto every three minutes. Nothing is kept, and every paymen”E2
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E15E16
  • It has sections such as /coins, /launch, /proof, /docs and /source.E29
  • While loading, it called 7 endpoints on its own servers, such as /api/config, /api/stats, /assets/catalog.json and 4 more.E18E19E20E21

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 2×E6
fonts.googleapis.comGoogle Fonts: fonts 1×E5
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
raw.githubusercontent.comGitHub Pages / raw files: static file hosting 2×E9
Not identifiedServices we don't have in our list yet. 5
backpack.exchangenot identified 36×E10
xstocks-metadata.backed.finot identified 22×E7
metadata.backpack.exchangenot identified 1×E12
s3-symbol-logo.tradingview.comnot identified 1×E8
tree.newsnot identified 1×E11

Crypto and wallets

  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E30

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E30

signTransaction

Loading its content

Its content loads from its own API while you browse (/api/config, /api/stats, /assets/catalog.json, /api/proof and 2 more).E18E19E20E21E22

/api/config/api/stats/assets/catalog.json/api/proof/api/coins/api/source

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E17

canvas

Saving data on your device

It saves data in your browser (localStorage and sessionStorage), so some things persist between visits.E16E14

local_storagesessionStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__cf_bmE13backed.fi about 0 daysother company

sessionStorageE14: dv.sel

Pages and API calls

Pages it links to

//coins/launch/proof/docs/source

Endpoints

Called while loading (seen) or named in the code (code).

usestockz.xyz/api/configseenE18
usestockz.xyz/api/statsseenE19
usestockz.xyz/assets/catalog.jsonseenE20
usestockz.xyz/api/proofseenE21
usestockz.xyz/api/coinsseenE22
usestockz.xyz/api/sourceseenE23
usestockz.xyz/api/costsseenE24
/assets/catalog.jsoncodeE25
/api/launch/sendcodeE26
/api/launch/statuscodeE27
/api/walletcodeE28

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: STOCKZ: coins that pay their holders in stocks
page title · https://usestockz.xyz/
E2
Page description: Launch a pump.fun coin whose creator fees are paid to its holders in stocks or crypto every three minutes. Nothing is kept, and every payment is on ch
page description · https://usestockz.xyz/
E3
Main heading: Launch a coin that pays its holders in Tesla NVIDIA the S&P 500 gold SpaceX Apple Meta Amazon the Nasdaq 100 Solana
page h1 · https://usestockz.xyz/
E4
15 request(s) to usestockz.xyz
types: 7 fetch, 4 script, 2 stylesheet
GET https://usestockz.xyz/ · fetch · 15 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/geist/v5/gyByhwUxId8gMEwcGFU.woff2 · font · 2 requests · network recording
E7
22 request(s) to xstocks-metadata.backed.fi
types: 22 image
GET https://xstocks-metadata.backed.fi/logos/tokens/TSLAx.png · image · 22 requests · network recording
E8
1 request(s) to s3-symbol-logo.tradingview.com
types: 1 image
GET https://s3-symbol-logo.tradingview.com/spacex.svg · image · network recording
E9
2 request(s) to raw.githubusercontent.com
types: 2 image
GET https://raw.githubusercontent.com/solana-labs/token-list/main/assets/mainnet/So11111111111111111111111111111111111111112/l… · image · 2 requests · network recording
E10
36 request(s) to backpack.exchange
types: 36 image
GET https://backpack.exchange/api/stock-logo/TTWO · image · 36 requests · network recording
E11
1 request(s) to tree.news
types: 1 image
GET https://tree.news/static/images/community.png · image · network recording
E12
1 request(s) to metadata.backpack.exchange
types: 1 image
GET https://metadata.backpack.exchange/stock-images/backpack_securities.png · image · network recording
E13
Cookie '__cf_bm' set for backed.fi
kept for about 0 days
cookie __cf_bm on backed.fi · value not stored
E14
sessionStorage: 1 key(s) saved in your browser
sessionStorage keys: dv.sel · values not stored
E15
Uses the browser ability: clipboard_write
can copy text to your clipboard
usestockz.xyz/assets/shell.js @ 47:43 · “clipboard.writeText(” · pattern scan
E16
Uses the browser ability: local_storage
saves small bits of data in your browser
usestockz.xyz/assets/shell.js @ 154:20 · “localStorage.setItem(” · pattern scan
E17
Uses the browser ability: canvas
draws graphics on a canvas
usestockz.xyz/assets/home.js @ 55:43 · “getContext('2d'” · pattern scan
E18
The page called /api/config on usestockz.xyz (GET)
GET https://usestockz.xyz/api/config · fetch · network recording
E19
The page called /api/stats on usestockz.xyz (GET)
GET https://usestockz.xyz/api/stats · fetch · network recording
E20
The page called /assets/catalog.json on usestockz.xyz (GET)
GET https://usestockz.xyz/assets/catalog.json · fetch · network recording
E21
The page called /api/proof on usestockz.xyz (GET)
GET https://usestockz.xyz/api/proof · fetch · network recording
E22
The page called /api/coins on usestockz.xyz (GET)
GET https://usestockz.xyz/api/coins · fetch · network recording
E23
The page called /api/source on usestockz.xyz (GET)
GET https://usestockz.xyz/api/source · fetch · network recording
E24
The page called /api/costs on usestockz.xyz (GET)
GET https://usestockz.xyz/api/costs · fetch · network recording
E25
Code reader found the endpoint /assets/catalog.json
how: call:fetch
usestockz.xyz/assets/shell.js @ 38:48 · “/assets/catalog.json” · the code reader
E26
Code reader found the endpoint /api/launch/send
how: call:post
usestockz.xyz/assets/shell.js @ 217:22 · “/api/launch/send” · the code reader
E27
Code reader found the endpoint /api/launch/status
how: call:post
usestockz.xyz/assets/shell.js @ 224:24 · “/api/launch/status” · the code reader
E28
The code names the endpoint /api/wallet
usestockz.xyz/assets/home-cards.js @ 34:28 · “/api/wallet” · pattern scan
E29
6 links to pages on the same site
page links · https://usestockz.xyz/ · /, /coins, /launch, /proof, /docs, /source
E30
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
usestockz.xyz/assets/shell.js @ 141:125 · “signTransaction” · pattern scan
E31
The site says: “…STOCKZ keeps nothing, and every payment can be checked on chain. Launch a coin Creator fees Collected so far0.000 SOL…”
page text · https://usestockz.xyz/ · …STOCKZ keeps nothing, and every payment can be checked on chain. Launch a coin Creator fees Collected so far0.000 SOL…
E32
The site says: “…t payout round in 0:25 CAAYVQ28…gWpumpAYVQ…pump Launch Connect wallet Copy address My payouts Disconnect Launch a coin that…”
page text · https://usestockz.xyz/ · …t payout round in 0:25 CAAYVQ28…gWpumpAYVQ…pump Launch Connect wallet Copy address My payouts Disconnect Launch a coin that…
E33
The site says: “…SOL0% of collected Paid to the network for the claim, swap and payout transactions. + Waiting for the next round0…”
page text · https://usestockz.xyz/ · …SOL0% of collected Paid to the network for the claim, swap and payout transactions. + Waiting for the next round0…
E34
The Internet Archive has no saved copy of usestockz.xyz
page web archive · https://web.archive.org/web/*/usestockz.xyz
E35
Agent step 1: view
AI agent step 1 · view on /
E36
Agent step 2: go /proof
AI agent step 2 · go on /proof · page called GET usestockz.xyz/api/config, GET usestockz.xyz/api/stats, GET usestockz.xyz/api/proof
E37
Agent step 3: click Connect wallet
AI agent step 3 · click on /proof
E38
Agent step 4: go /source
AI agent step 4 · go on /source · page called GET usestockz.xyz/api/config, GET usestockz.xyz/api/stats, GET usestockz.xyz/api/source, GET usestockz.xyz/source/engine/desk.py
E39
Agent step 5: go /coins
AI agent step 5 · go on /coins · page called GET usestockz.xyz/api/config, GET usestockz.xyz/api/stats, GET usestockz.xyz/api/coins
E40
Agent step 6: go /proof (not done: Already opened /proof at step 2: its view is above; pick another page.)
AI agent step 6 · go on /coins
E41
Agent step 7: type How it works ← “4NsgmvVSBs4c1XbCso87TWgVDoXn5mAjM9wMDrghEGTs” (not done: Locator.fill: Error: Element is not an <input>, <textarea>, <select> or [content)
AI agent step 7 · type on /coins
E42
Agent step 8: go /launch
AI agent step 8 · go on /launch · page called GET usestockz.xyz/api/config, GET usestockz.xyz/api/stats, GET usestockz.xyz/assets/catalog.json, GET usestockz.xyz/api/pairs

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id Bf1722bk.