trenchcoat
Free · no sign-up
Website report · 55 min ago

payday.direct

“Explore · Payday”

Template-written 65 evidence items Code reader analysed 13 scripts
What this means for you

Payday talked to 4 outside services on a first visit, including 1 that measures visits or shows ads.E6

  • An AI agent used the site and saw 1 of 1 claimed features working.E60E62E63E65
  • Live data / analytics: The Explore page showed a coin list with market caps, % changes and totals (volume $45.5K, 7 coins, 292 holders), loaded through /api/explore. On the Analytics page (/api/analytics), switching to 24h made a new request and the figures updated: trading volume went from $20.9K/526 trades to $21.6K/545 trades and the charts switched to hourly buckets.E60E62E63E65
  • Also noticed, Analytics show no payouts or burns so far: Analytics listed $58.20 in fees generated, all of it still in coin vaults. It showed $0.00 collected, $0.00 paid on X Money and 0 tokens burned.E63E65
  • Also noticed, Welcome modal blocks clicks on the Explore page: While the Welcome overlay was open, clicks on the Analytics link and the New tab timed out. Dismissing it with Skip let clicks go through again.E61E62E64
  • Tech check: the site claims live data / analytics, and its public page shows matching evidence.E58E17E18E19
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E6
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E56

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Live data / analytics

“NAVIGATE Explore Watchlist Payouts Analytics Claim Docs MANAGE TOKENS My coins Import token Launch…”E58

Calls to its own backend: /api/me, /api/config, /api/exploreE17E18E19E20

Calls its own backend /api/me, /api/config, /api/exploreE17E18E19E20
Wallet code Privy (wallet login), WalletConnect / Reown, web3.jsE9E10E11E12
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

Live data / analytics

The Explore page showed a coin list with market caps, % changes and totals (volume $45.5K, 7 coins, 292 holders), loaded through /api/explore. On the Analytics page (/api/analytics), switching to 24h made a new request and the figures updated: trading volume went from $20.9K/526 trades to $21.6K/545 trades and the charts switched to hourly buckets.E60E62E63E65

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Analytics show no payouts or burns so far

Analytics listed $58.20 in fees generated, all of it still in coin vaults. It showed $0.00 collected, $0.00 paid on X Money and 0 tokens burned.E63E65

Noticed

Welcome modal blocks clicks on the Explore page

While the Welcome overlay was open, clicks on the Analytics link and the New tab timed out. Dismissing it with Skip let clicks go through again.E61E62E64

What it is

  • The Internet Archive first saved this site on 2024-02-29 (985 days ago).E59
  • The site describes itself as: “Launch a coin for any X account. Its creator fees arrive as dollars on X Money.”E2
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E14E15
  • It has sections such as /explore, /claim and /app.E55
  • While loading, it called 6 endpoints on its own servers, such as /api/me, /api/config, /api/explore and 3 more.E17E18E19E20

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 2×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E5
Not identifiedServices we don't have in our list yet. 1
unavatar.ionot identified 8×E8

Crypto and wallets

  • Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, web3.js, Solana web3 / wallet adapter and Phantom.E9E10E11E12E13
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E56
  • signMessage: asks a wallet to sign a message.E57

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E56

signTransaction

Connecting your wallet

It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, web3.js, Solana web3 / wallet adapter and 3 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E9E10E11E12E13

Privy (wallet login)WalletConnect / Reownweb3.jsSolana web3 / wallet adapterPhantomsignTransactionsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/auth/privy/config, /auth/logout and /auth/wallet/siws).E20E26E28

/auth/privy/config/auth/logout/auth/wallet/siws

Loading its content

Its content loads from its own API while you browse (/api/me, /api/config, /api/explore, /auth/privy/config and 2 more).E17E18E19E20E21

/api/me/api/config/api/explore/auth/privy/config/api/version/api/handles/leaderboard

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E16

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E15

local_storage

Pages and API calls

Pages it links to

/explore/claim/app

Endpoints

Called while loading (seen) or named in the code (code).

payday.direct/api/meseenE17
payday.direct/api/configseenE18
payday.direct/api/exploreseenE19
payday.direct/auth/privy/configseenE20
payday.direct/api/versionseenE21
payday.direct/api/handles/leaderboardseenE22
/api/issuescodeE23
/api/versioncodeE24
/api/configcodeE25
/auth/privy/configcodeE26
/api/kb/client-errorcodeE27
/auth/logoutcodeE28
/auth/wallet/siwscodeE29
/auth/privy/link-xcodeE30
/auth/privycodeE31
/api/waitlistcodeE32
/auth/bypasscodeE33
/api/accept-termscodeE34
/api/mecodeE35
/api/trade/walletcodeE36
/api/deploy/pending-splitscodeE37
/api/watchlistcodeE38
/api/portfolio/feescodeE39
/api/quote-mintscodeE40
/vault/sendcodeE41
/vault/send/submitcodeE42
/api/payouts/summarycodeE43
/api/candlescodeE44
/api/markscodeE45
/api/coin-pagecodeE46

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Explore · Payday
page title · https://payday.direct/explore
E2
Page description: Launch a coin for any X account. Its creator fees arrive as dollars on X Money.
page description · https://payday.direct/explore
E3
Site name: Payday
page site_name · https://payday.direct/explore
E4
52 request(s) to payday.direct
types: 27 image, 14 fetch, 7 script
GET https://payday.direct/ · image · 52 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E7
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 · font · 2 requests · network recording
E8
8 request(s) to unavatar.io
types: 8 image
GET https://unavatar.io/x/pumpfun · image · 8 requests · network recording
E9
Privy (wallet login) found in the code
payday.direct/auth.js @ 36:39 · “@privy-io” · pattern scan
E10
WalletConnect / Reown found in the code
payday.direct/auth.js @ 742:48 · “WalletConnect” · pattern scan
E11
web3.js found in the code
payday.direct/explore.js @ 1863:56 · “web3.js” · pattern scan
E12
Solana web3 / wallet adapter found in the code
payday.direct/explore.js @ 1863:48 · “@solana/web3.js” · pattern scan
E13
Phantom found in the code
payday.direct/explore.js @ 1592:64 · “window.phantom” · pattern scan
E14
Uses the browser ability: clipboard_write
can copy text to your clipboard
payday.direct/explore.js @ 922:33 · “clipboard.writeText(” · pattern scan
E15
Uses the browser ability: local_storage
saves small bits of data in your browser
payday.direct/ (page HTML) @ 1864:85 · “localStorage.setItem(” · pattern scan
E16
Uses the browser ability: canvas
draws graphics on a canvas
payday.direct/lightweight-charts.js @ 7:103040 · “getContext("2d"” · pattern scan
E17
The page called /api/me on payday.direct (GET)
GET https://payday.direct/api/me · fetch · network recording
E18
The page called /api/config on payday.direct (GET)
GET https://payday.direct/api/config · fetch · network recording
E19
The page called /api/explore on payday.direct (GET)
GET https://payday.direct/api/explore · fetch · network recording
E20
The page called /auth/privy/config on payday.direct (GET)
GET https://payday.direct/auth/privy/config · fetch · network recording
E21
The page called /api/version on payday.direct (GET)
GET https://payday.direct/api/version · fetch · network recording
E22
The page called /api/handles/leaderboard on payday.direct (GET)
GET https://payday.direct/api/handles/leaderboard · fetch · network recording
E23
Code reader found the endpoint /api/issues
how: call:fetch
payday.direct/kb-report.js @ 65:6 · “/api/issues” · the code reader
E24
Code reader found the endpoint /api/version
how: call:fetch
payday.direct/auth.js @ 248:4 · “/api/version” · the code reader
E25
Code reader found the endpoint /api/config
how: call:fetch
payday.direct/auth.js @ 256:4 · “/api/config” · the code reader
E26
Code reader found the endpoint /auth/privy/config
how: call:fetch
payday.direct/auth.js @ 319:11 · “/auth/privy/config” · the code reader
E27
Code reader found the endpoint /api/kb/client-error
how: call:fetch
payday.direct/auth.js @ 389:6 · “/api/kb/client-error” · the code reader
E28
Code reader found the endpoint /auth/logout
how: call:fetch
payday.direct/auth.js @ 797:24 · “/auth/logout” · the code reader
E29
Code reader found the endpoint /auth/wallet/siws
how: call:fetch
payday.direct/auth.js @ 808:13 · “/auth/wallet/siws” · the code reader
E30
Code reader found the endpoint /auth/privy/link-x
how: call:fetch
payday.direct/auth.js @ 1019:13 · “/auth/privy/link-x” · the code reader
E31
Code reader found the endpoint /auth/privy
how: call:fetch
payday.direct/auth.js @ 1048:13 · “/auth/privy” · the code reader
E32
Code reader found the endpoint /api/waitlist
how: call:fetch
payday.direct/auth.js @ 1428:6 · “/api/waitlist” · the code reader
E33
Code reader found the endpoint /auth/bypass
how: call:fetch
payday.direct/auth.js @ 1466:10 · “/auth/bypass” · the code reader
E34
Code reader found the endpoint /api/accept-terms
how: call:fetch
payday.direct/auth.js @ 1512:6 · “/api/accept-terms” · the code reader
E35
Code reader found the endpoint /api/me
how: call:fetch
payday.direct/auth.js @ 1544:11 · “/api/me” · the code reader
E36
Code reader found the endpoint /api/trade/wallet
how: call:fetch
payday.direct/explore.js @ 1840:16 · “/api/trade/wallet” · the code reader
E37
Code reader found the endpoint /api/deploy/pending-splits
how: call:fetch
payday.direct/explore.js @ 1962:62 · “/api/deploy/pending-splits” · the code reader
E38
Code reader found the endpoint /api/watchlist
how: call:fetch
payday.direct/explore.js @ 2051:2 · “/api/watchlist” · the code reader
E39
Code reader found the endpoint /api/portfolio/fees
how: call:fetch
payday.direct/explore.js @ 2231:2 · “/api/portfolio/fees” · the code reader
E40
Code reader found the endpoint /api/quote-mints
how: call:fetch
payday.direct/explore.js @ 2261:20 · “/api/quote-mints” · the code reader
E41
Code reader found the endpoint /vault/send
how: call:post
payday.direct/explore.js @ 2524:2 · “/vault/send” · the code reader
E42
Code reader found the endpoint /vault/send/submit
how: call:post
payday.direct/explore.js @ 2528:129 · “/vault/send/submit” · the code reader
E43
Code reader found the endpoint /api/payouts/summary
how: call:fetch
payday.direct/explore.js @ 2539:2 · “/api/payouts/summary” · the code reader
E44
The code names the endpoint /api/candles
payday.direct/kb-datafeed.js @ 159:22 · “/api/candles” · pattern scan
E45
The code names the endpoint /api/marks
payday.direct/kb-datafeed.js @ 358:16 · “/api/marks” · pattern scan
E46
The code names the endpoint /api/coin-page
payday.direct/explore.js @ 787:12 · “/api/coin-page” · pattern scan
E47
The code names the endpoint /api/pad/token
payday.direct/explore.js @ 795:12 · “/api/pad/token” · pattern scan
E48
The code names the endpoint /api
payday.direct/explore.js @ 940:22 · “/api” · pattern scan
E49
The code names the endpoint /api/fee-route
payday.direct/explore.js @ 1023:10 · “/api/fee-route” · pattern scan
E50
The code names the endpoint /api/basket
payday.direct/explore.js @ 1283:10 · “/api/basket” · pattern scan
E51
The code names the endpoint /api/analytics
payday.direct/explore.js @ 2444:10 · “/api/analytics” · pattern scan
E52
The code names the endpoint /api/x
payday.direct/explore.js @ 2522:46 · “/api/x” · pattern scan
E53
The code names the endpoint /api/fd/dex
payday.direct/explore.js @ 2689:10 · “/api/fd/dex” · pattern scan
E54
The code names the endpoint /api/fd/coin
payday.direct/explore.js @ 2698:10 · “/api/fd/coin” · pattern scan
E55
3 links to pages on the same site
page links · https://payday.direct/explore · /explore, /claim, /app
E56
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
payday.direct/explore.js @ 1814:21 · “signAndSendTransaction” · pattern scan
E57
Wallet request in code: signMessage
asks a wallet to sign a message
payday.direct/auth.js @ 543:19 · “signMessage” · pattern scan
E58
The site says: “NAVIGATE Explore Watchlist Payouts Analytics Claim Docs MANAGE TOKENS My coins Import token Launch…”
page text · https://payday.direct/explore · NAVIGATE Explore Watchlist Payouts Analytics Claim Docs MANAGE TOKENS My coins Import token Launch…
E59
The Internet Archive first saved payday.direct on 2024-02-29 and has snapshots from 8 different days
page web archive · https://web.archive.org/web/20240229044932/payday.direct
E60
Agent step 1: view
AI agent step 1 · view on /explore
E61
Agent step 2: click Analytics (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 2 · click on /explore · page called GET payday.direct/api/me
E62
Agent step 3: click New (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 3 · click on /explore · page called GET payday.direct/api/explore, GET payday.direct/api/me
E63
Agent step 4: go /explore
AI agent step 4 · go on /explore · page called POST payday.direct/cdn-cgi/rum, GET payday.direct/api/analytics
E64
Agent step 5: click Skip
AI agent step 5 · click on /explore
E65
Agent step 6: click 24h
AI agent step 6 · click on /explore · page called GET payday.direct/api/analytics

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id KEcmoQxD.