trenchcoat
Free · no sign-up
Website report · 30 Oct 2026

pitpaw.fun

“Pitpaw | Your Solana pit crew”

Template-written 18 evidence items Code reader analysed 1 scripts
What this means for you

pitpaw.fun only talked to its own servers while we watched.E1

  • Tech check: the site claims wallet connection and a working app / platform, and its public page shows matching evidence.E16E17E7E15E9
  • We saw no known analytics or advertising services load on the first visit.E1
  • 1 cookie was set in your browser, all by the site itself.E5

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“…rkshop Markets Trade Pit Cards Positions Journal Guide Connect wallet Your Solana pit crew A pit stop. For your next trade.…”E16

Wallet libraries in its code: PhantomE7

Wallet requests in its code: signMessageE15

Evidence found

A working app / platform

“…market reading $96.97 -3.39% in 24h Jupiter Perpetuals API v2 Read Oct 30, 11:07:48 READ THE SOURCE PIT CARD My r…”E17

Calls to its own backend: /api/session, /api/market-catalog, /api/marketsE9E10E11E12

Wallet code: PhantomE7

Calls its own backend /api/session, /api/market-catalog, /api/marketsE9E10E11E12
Wallet code PhantomE7E15
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive has never saved this site, so it is probably new.E18
  • The site describes itself as: “Pitpaw is your Solana perpetual workshop. Prepare a plan, inspect live market readings, and keep your record. Trading execution is not open ”E2
  • It's built with React (common tools for building web apps).E6
  • In your browser it can copy text to your clipboard.E8
  • It has sections such as /markets, /trade, /cards, /positions, /journal and /guide.E13E14
  • While loading, it called 4 endpoints on its own servers, such as /api/session, /api/market-catalog, /api/markets and 1 more.E9E10E11E12

Where your data goes

On a first visit the page only talked to its own servers (pitpaw.fun).

Crypto and wallets

  • Wallet tools in the code: Phantom.E7
  • signMessage: asks a wallet to sign a message.E15

How key features work

Connecting your wallet

It connects to crypto wallets using Phantom and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E7

PhantomsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/session).E9

/api/session

Loading its content

Its content loads from its own API while you browse (/api/session, /api/market-catalog, /api/markets and /api/config).E9E10E11E12

/api/session/api/market-catalog/api/markets/api/config

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__Host-pitpawE5pitpaw.fun about 7 daysthe site

Pages and API calls

Pages it links to

//markets/trade/cards/positions/journal/guide/

Endpoints

Called while loading (seen) or named in the code (code).

pitpaw.fun/api/sessionseenE9
pitpaw.fun/api/market-catalogseenE10
pitpaw.fun/api/marketsseenE11
pitpaw.fun/api/configseenE12

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Pitpaw | Your Solana pit crew
page title · https://pitpaw.fun/
E2
Page description: Pitpaw is your Solana perpetual workshop. Prepare a plan, inspect live market readings, and keep your record. Trading execution is not open yet.
page description · https://pitpaw.fun/
E3
Main heading: A pit stop. For your next trade.
page h1 · https://pitpaw.fun/
E4
15 request(s) to pitpaw.fun
types: 7 font, 4 fetch, 1 document
GET https://pitpaw.fun/ · font · 15 requests · network recording
E5
Cookie '__Host-pitpaw' set for pitpaw.fun
kept for about 7 days
cookie __Host-pitpaw on pitpaw.fun · value not stored
E6
React detected by The code reader (react-runtime)
confidence: medium
pitpaw.fun/assets/index-1rN4PIDc.js · “react-runtime” · The code reader analyze-web-bundle 6.4.0
E7
Phantom found in the code
pitpaw.fun/assets/index-1rN4PIDc.js @ 10:42517 · “window.phantom” · pattern scan
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
pitpaw.fun/assets/index-1rN4PIDc.js @ 10:76802 · “clipboard.writeText(” · pattern scan
E9
The page called /api/session on pitpaw.fun (GET)
GET https://pitpaw.fun/api/session · fetch · network recording
E10
The page called /api/market-catalog on pitpaw.fun (GET)
GET https://pitpaw.fun/api/market-catalog · fetch · network recording
E11
The page called /api/markets on pitpaw.fun (GET)
GET https://pitpaw.fun/api/markets · fetch · network recording
E12
The page called /api/config on pitpaw.fun (GET)
GET https://pitpaw.fun/api/config · fetch · network recording
E13
7 links to pages on the same site
page links · https://pitpaw.fun/ · /, /markets, /trade, /cards, /positions, /journal, /guide
E14
Code reader found the route /
pitpaw.fun/assets/index-1rN4PIDc.js @ 10:38923 · “/” · The code reader analyze-web-bundle 6.4.0
E15
Wallet request in code: signMessage
asks a wallet to sign a message
pitpaw.fun/assets/index-1rN4PIDc.js @ 10:80697 · “signMessage” · pattern scan
E16
The site says: “…rkshop Markets Trade Pit Cards Positions Journal Guide Connect wallet Your Solana pit crew A pit stop. For your next trade.…”
page text · https://pitpaw.fun/ · …rkshop Markets Trade Pit Cards Positions Journal Guide Connect wallet Your Solana pit crew A pit stop. For your next trade.…
E17
The site says: “…market reading $96.97 -3.39% in 24h Jupiter Perpetuals API v2 Read Oct 30, 11:07:48 READ THE SOURCE PIT CARD My r…”
page text · https://pitpaw.fun/ · …market reading $96.97 -3.39% in 24h Jupiter Perpetuals API v2 Read Oct 30, 11:07:48 READ THE SOURCE PIT CARD My r…
E18
The Internet Archive has no saved copy of pitpaw.fun
page web archive · https://web.archive.org/web/*/pitpaw.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id HGr2sVeF.