Website report · 1 h ago

kyraa.xyz

“Kyraa — every developer leaves a waveform”

Template-written 30 evidence items Code reader analysed 19 scripts
What this means for you

kyraa.xyz talked to 3 outside services on a first visit, including 1 that measures visits or shows ads.E6

  • Tech check: the site claims wallet connection, and its public page shows matching evidence.E29E8E9E28
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E6

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“Skip to content Kyraa Sample developer data Connect wallet Every developer leaves a waveform. Trace a developer O…”E29

Wallet libraries in its code: WalletConnect / Reown, PhantomE8E9

Wallet requests in its code: signMessageE28

Calls its own backend /api/feedE13
Wallet code WalletConnect / Reown, PhantomE8E9E28
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2026-11-13 (0 days ago).E30
  • The site describes itself as: “Kyraa gives every Solana developer a waveform that follows them through fresh wallets and relaunches. Trace any wallet or mint, live board, ”E2
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E10E11
  • While loading, it called 1 endpoint on its own servers, such as /api/feed.E13

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E5

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown and Phantom.E8E9
  • signMessage: asks a wallet to sign a message.E28

How key features work

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Phantom and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E8E9

WalletConnect / ReownPhantomsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/nonce and /api/auth/verify).E20E21

/api/auth/nonce/api/auth/verify

Loading its content

Its content loads from its own API while you browse (/api/feed).E13

/api/feed

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E11

local_storage

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

kyraa.xyz/api/feedseenE13
/api/tokencodeE14
/api/ohlcvcodeE15
/api/dev/resolvecodeE16
/api/dev/profilecodeE17
/api/dev/batchcodeE18
/api/statscodeE19
/api/auth/noncecodeE20
/api/auth/verifycodeE21
/api/signalscodeE22
/api/tokenscodeE23
/api/imgcodeE24
/api/identitycodeE25
/api/badgecodeE26

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Kyraa — every developer leaves a waveform
page title · https://kyraa.xyz/
E2
Page description: Kyraa gives every Solana developer a waveform that follows them through fresh wallets and relaunches. Trace any wallet or mint, live board, verify, st
page description · https://kyraa.xyz/
E3
Main heading: Every developer leaves a waveform.
page h1 · https://kyraa.xyz/
E4
24 request(s) to kyraa.xyz
types: 19 script, 1 document, 1 stylesheet
GET https://kyraa.xyz/ · script · 24 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E7
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 · font · 3 requests · network recording
E8
WalletConnect / Reown found in the code
kyraa.xyz/js/config.js @ 31:5 · “walletConnect” · pattern scan
E9
Phantom found in the code
kyraa.xyz/js/wallet.js @ 13:27 · “window.phantom” · pattern scan
E10
Uses the browser ability: clipboard_write
can copy text to your clipboard
kyraa.xyz/js/core.js @ 96:27 · “clipboard.writeText(” · pattern scan
E11
Uses the browser ability: local_storage
saves small bits of data in your browser
kyraa.xyz/js/wallet.js @ 55:34 · “localStorage.setItem(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
kyraa.xyz/js/core.js @ 117:20 · “getContext('2d'” · pattern scan
E13
The page called /api/feed on kyraa.xyz (GET)
GET https://kyraa.xyz/api/feed · fetch · network recording
E14
The code names the endpoint /api/token
kyraa.xyz/js/pages/coin.js @ 107:34 · “/api/token” · pattern scan
E15
The code names the endpoint /api/ohlcv
kyraa.xyz/js/pages/coin.js @ 225:36 · “/api/ohlcv” · pattern scan
E16
The code names the endpoint /api/dev/resolve
kyraa.xyz/js/devapi.js @ 48:26 · “/api/dev/resolve” · pattern scan
E17
The code names the endpoint /api/dev/profile
kyraa.xyz/js/devapi.js @ 49:26 · “/api/dev/profile” · pattern scan
E18
The code names the endpoint /api/dev/batch
kyraa.xyz/js/devapi.js @ 53:30 · “/api/dev/batch” · pattern scan
E19
The code names the endpoint /api/stats
kyraa.xyz/js/pages/protocol.js @ 130:96 · “/api/stats” · pattern scan
E20
The code names the endpoint /api/auth/nonce
kyraa.xyz/js/wallet.js @ 27:40 · “/api/auth/nonce” · pattern scan
E21
The code names the endpoint /api/auth/verify
kyraa.xyz/js/wallet.js @ 30:30 · “/api/auth/verify” · pattern scan
E22
The code names the endpoint /api/signals
kyraa.xyz/js/wallet.js @ 59:33 · “/api/signals” · pattern scan
E23
The code names the endpoint /api/tokens
kyraa.xyz/js/pages/tune.js @ 87:37 · “/api/tokens” · pattern scan
E24
The code names the endpoint /api/img
kyraa.xyz/js/pages/verify.js @ 34:17 · “/api/img” · pattern scan
E25
The code names the endpoint /api/identity
kyraa.xyz/js/pages/verify.js @ 46:28 · “/api/identity” · pattern scan
E26
The code names the endpoint /api/badge
kyraa.xyz/js/pages/verify.js @ 214:44 · “/api/badge” · pattern scan
E27
1 links to pages on the same site
page links · https://kyraa.xyz/ · /
E28
Wallet request in code: signMessage
asks a wallet to sign a message
kyraa.xyz/js/wallet.js @ 1:43 · “signMessage” · pattern scan
E29
The site says: “Skip to content Kyraa Sample developer data Connect wallet Every developer leaves a waveform. Trace a developer O…”
page text · https://kyraa.xyz/ · Skip to content Kyraa Sample developer data Connect wallet Every developer leaves a waveform. Trace a developer O…
E30
The Internet Archive first saved kyraa.xyz on 2026-11-13 and has snapshots from 1 different days
page web archive · https://web.archive.org/web/20261113104443/kyraa.xyz

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 3 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id MkynfUGr.