trenchcoat
Free · no sign-up
Website report · 19 h ago

ashforge.xyz

“Ashforge — forge, raid, earn”

Template-written 30 evidence items Code reader analysed 1 scripts
What this means for you

Ashforge only talked to its own servers while we watched.E1

  • An AI agent used the site and saw 0 of 2 claimed features working.E27E28
  • On-chain / smart contracts: The On-chain section says the game runs on Elysium (Hyperliquid) and pays rewards from a Vault contract, but no contract address is listed: it shows "CA: coming at launch". Opening the section made no network calls, and the page showed no live on-chain data.E27E28
  • Wallet connection: Step 1 of the waitlist asks you to sign a message with a wallet. The page showed "No wallet found in this browser" and only offered an "Open in MetaMask" link. Connecting a wallet is outside what this test can do.E27
  • Also noticed, Waitlist step 3 inputs did not respond: I tried to type "test" into the reply-link field and to click Check. Both actions timed out and the page made no network calls. These controls may be locked until a wallet or X account is connected.E29E30
  • Tech check: the site claims on-chain / smart contracts and wallet connection, and its public page shows matching evidence.E24E25E23E22E6
  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“Skip to content Ashforge How it works Inside NFTs On-chain FAQ Waitlist Join the waitlist Ashforge Forge a legend…”E24

Wallet requests in its code: personal_sign, eth_requestAccountsE23E22

Evidence found

Wallet connection

“…s: finish steps 1 to 3 with your wallet and X account. Connect your wallet +50 Sign a free message to prove the wallet is yours.…”E25

Wallet libraries in its code: EIP-6963 wallet discoveryE6

Wallet requests in its code: personal_sign, eth_requestAccountsE23E22

Calls its own backend /api/site, /api/ea/cfgE10E11
Wallet code EIP-6963 wallet discoveryE6E23E22
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 4 steps and saw 0 of 2 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Not seen working

On-chain / smart contracts

The On-chain section says the game runs on Elysium (Hyperliquid) and pays rewards from a Vault contract, but no contract address is listed: it shows "CA: coming at launch". Opening the section made no network calls, and the page showed no live on-chain data.E27E28

Couldn't test

Wallet connection

Step 1 of the waitlist asks you to sign a message with a wallet. The page showed "No wallet found in this browser" and only offered an "Open in MetaMask" link. Connecting a wallet is outside what this test can do.E27

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Waitlist step 3 inputs did not respond

I tried to type "test" into the reply-link field and to click Check. Both actions timed out and the page made no network calls. These controls may be locked until a wallet or X account is connected.E29E30

What it is

  • The Internet Archive has never saved this site, so it is probably new.E26
  • The site describes itself as: “Ashforge is an idle pixel-art game on Elysium. Forge a legendary sword at the Anvil, send your heroes into the dungeons and earn the game's ”E2
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E7E8
  • It has sections such as /privacy and /terms.E21
  • While loading, it called 2 endpoints on its own servers, such as /api/site and /api/ea/cfg.E10E11

Where your data goes

On a first visit the page only talked to its own servers (ashforge.xyz).

Crypto and wallets

  • Wallet tools in the code: EIP-6963 wallet discovery.E6
  • personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E23
  • eth_requestAccounts: asks to connect your wallet, which shows the site your address.E22

How key features work

Connecting your wallet

It connects to crypto wallets using EIP-6963 wallet discovery, personal_sign and eth_requestAccounts. Connecting shows the site your wallet address; it doesn't move funds by itself.E6E22

EIP-6963 wallet discoverypersonal_signeth_requestAccounts

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/ea/login).E15

/api/ea/login

Loading its content

Its content loads from its own API while you browse (/api/site and /api/ea/cfg).E10E11

/api/site/api/ea/cfg

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E8

local_storage

Pages and API calls

Pages it links to

//privacy/terms

Endpoints

Called while loading (seen) or named in the code (code).

ashforge.xyz/api/siteseenE10
ashforge.xyz/api/ea/cfgseenE11
/api/sitecodeE12
/api/ea/cfgcodeE13
/api/ea/noncecodeE14
/api/ea/logincodeE15
/api/ea/stepcodeE16
/api/ea/x/startcodeE17
/api/ea/topcodeE18
/api/ea/logoutcodeE19
/api/ea/mecodeE20

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Ashforge — forge, raid, earn
page title · https://ashforge.xyz/
E2
Page description: Ashforge is an idle pixel-art game on Elysium. Forge a legendary sword at the Anvil, send your heroes into the dungeons and earn the game's token, ASH
page description · https://ashforge.xyz/
E3
Site name: Ashforge
page site_name · https://ashforge.xyz/
E4
Main heading: Ashforge
page h1 · https://ashforge.xyz/
E5
31 request(s) to ashforge.xyz
types: 26 image, 2 document, 2 fetch
GET https://ashforge.xyz/waitlist · image · 31 requests · network recording
E6
EIP-6963 wallet discovery found in the code
ashforge.xyz/ (page HTML) @ 963:28 · “eip6963:announceProvider” · pattern scan
E7
Uses the browser ability: clipboard_write
can copy text to your clipboard
ashforge.xyz/ (page HTML) @ 747:68 · “clipboard.writeText(” · pattern scan
E8
Uses the browser ability: local_storage
saves small bits of data in your browser
ashforge.xyz/ (page HTML) @ 699:116 · “localStorage.setItem(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
ashforge.xyz/ (page HTML) @ 915:18 · “getContext('2d'” · pattern scan
E10
The page called /api/site on ashforge.xyz (GET)
GET https://ashforge.xyz/api/site · fetch · network recording
E11
The page called /api/ea/cfg on ashforge.xyz (GET)
GET https://ashforge.xyz/api/ea/cfg · fetch · network recording
E12
Code reader found the endpoint /api/site
how: call:fetch
ashforge.xyz/ @ 66:2 · “/api/site” · the code reader
E13
Code reader found the endpoint /api/ea/cfg
how: call:fetch
ashforge.xyz/ @ 273:4 · “/api/ea/cfg” · the code reader
E14
The code names the endpoint /api/ea/nonce
ashforge.xyz/ (page HTML) @ 795:52 · “/api/ea/nonce” · pattern scan
E15
The code names the endpoint /api/ea/login
ashforge.xyz/ (page HTML) @ 799:36 · “/api/ea/login” · pattern scan
E16
The code names the endpoint /api/ea/step
ashforge.xyz/ (page HTML) @ 804:100 · “/api/ea/step” · pattern scan
E17
The code names the endpoint /api/ea/x/start
ashforge.xyz/ (page HTML) @ 847:109 · “/api/ea/x/start” · pattern scan
E18
The code names the endpoint /api/ea/top
ashforge.xyz/ (page HTML) @ 898:40 · “/api/ea/top” · pattern scan
E19
The code names the endpoint /api/ea/logout
ashforge.xyz/ (page HTML) @ 907:65 · “/api/ea/logout” · pattern scan
E20
The code names the endpoint /api/ea/me
ashforge.xyz/ (page HTML) @ 967:25 · “/api/ea/me” · pattern scan
E21
3 links to pages on the same site
page links · https://ashforge.xyz/ · /, /privacy, /terms
E22
Wallet request in code: eth_requestAccounts
asks to connect your wallet, which shows the site your address
ashforge.xyz/ (page HTML) @ 794:46 · “eth_requestAccounts” · pattern scan
E23
Wallet request in code: personal_sign
asks you to sign a text message (often to log in; moves no funds by itself)
ashforge.xyz/ (page HTML) @ 798:46 · “personal_sign” · pattern scan
E24
The site says: “Skip to content Ashforge How it works Inside NFTs On-chain FAQ Waitlist Join the waitlist Ashforge Forge a legend…”
page text · https://ashforge.xyz/ · Skip to content Ashforge How it works Inside NFTs On-chain FAQ Waitlist Join the waitlist Ashforge Forge a legend…
E25
The site says: “…s: finish steps 1 to 3 with your wallet and X account. Connect your wallet +50 Sign a free message to prove the wallet is yours.…”
page text · https://ashforge.xyz/ · …s: finish steps 1 to 3 with your wallet and X account. Connect your wallet +50 Sign a free message to prove the wallet is yours.…
E26
The Internet Archive has no saved copy of ashforge.xyz
page web archive · https://web.archive.org/web/*/ashforge.xyz
E27
Agent step 1: view
AI agent step 1 · view on /
E28
Agent step 2: click On-chain
AI agent step 2 · click on /
E29
Agent step 3: type Link of your reply ← “test” (not done: Locator.fill: Timeout 4000ms exceeded.)
AI agent step 3 · type on /
E30
Agent step 4: click Check (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 4 · click on /

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id OrlsUxRt.