trenchcoat
Free · no sign-up
Website report · 29 Oct 2026

pumpkinupfp.fun

“Pumpkinu — Haunt your PFP”

Template-written 14 evidence items Code reader analysed 14 scripts
What this means for you

pumpkinupfp.fun only talked to its own servers while we watched.E1

  • What loads is a page only: no calls to its own backend, no wallet code, no contract calls, no AI services and no live connections.E13
  • We saw no known analytics or advertising services load on the first visit.E1
  • 3 cookies were set in your browser, all by the site itself.E5E6E7

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend none seen
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What loads is a page only: no own backend calls, wallet code, contract calls, AI services or live connections.E13

What it is

  • The Internet Archive has never saved this site, so it is probably new.E14
  • The site describes itself as: “Give your profile a little afterlife. Create a Halloween PFP with original Pumpkinu artwork. Free, private, and wallet-free.”E2
  • It's built with React and Next.js (common tools for building web apps).E8E9
  • In your browser it can copy text to your clipboard.E10

Where your data goes

On a first visit the page only talked to its own servers (pumpkinupfp.fun).

How key features work

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E11

canvas

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__Host-appgarden-visitorE5pumpkinupfp.fun about 90 daysthe site
cf_clearanceE6pumpkinupfp.fun about 365 daysthe site
__cf_bmE7pumpkinupfp.fun about 0 daysthe site

Pages and API calls

Pages it links to

/

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Pumpkinu — Haunt your PFP
page title · https://pumpkinupfp.fun/
E2
Page description: Give your profile a little afterlife. Create a Halloween PFP with original Pumpkinu artwork. Free, private, and wallet-free.
page description · https://pumpkinupfp.fun/
E3
Main heading: A little pumpkin. A lot of afterlife.
page h1 · https://pumpkinupfp.fun/
E4
15 request(s) to pumpkinupfp.fun
types: 7 script, 5 image, 1 document
GET https://pumpkinupfp.fun/ · script · 15 requests · network recording
E5
Cookie '__Host-appgarden-visitor' set for pumpkinupfp.fun
kept for about 90 days
cookie __Host-appgarden-visitor on pumpkinupfp.fun · value not stored
E6
Cookie 'cf_clearance' set for pumpkinupfp.fun
kept for about 365 days
cookie cf_clearance on pumpkinupfp.fun · value not stored
E7
Cookie '__cf_bm' set for pumpkinupfp.fun
kept for about 0 days
cookie __cf_bm on pumpkinupfp.fun · value not stored
E8
React detected by the code reader (react-runtime)
confidence: medium
pumpkinupfp.fun/_next/static/chunks/4bd1b696-c023c6e3521b1417.js · “react-runtime” · the code reader
E9
Next.js detected by the code reader (next-runtime)
confidence: high
pumpkinupfp.fun/ · “next-runtime” · the code reader
E10
Uses the browser ability: clipboard_write
can copy text to your clipboard
pumpkinupfp.fun/_next/static/chunks/app/page-c7f8b40847b97886.js @ 1:925 · “clipboard.writeText(” · pattern scan
E11
Uses the browser ability: canvas
draws graphics on a canvas
pumpkinupfp.fun/_next/static/chunks/app/page-c7f8b40847b97886.js @ 1:1893 · “getContext("2d"” · pattern scan
E12
1 links to pages on the same site
page links · https://pumpkinupfp.fun/ · /
E13
15 requests on load: no own backend calls, wallet code, contract calls, AI services or live connections
GET https://pumpkinupfp.fun/ · summary · 15 requests · network recording
E14
The Internet Archive has no saved copy of pumpkinupfp.fun
page web archive · https://web.archive.org/web/*/pumpkinupfp.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id Ob1St9Es.