AS$ASIMOVnew$26.2K+124.0%CZ$CZnew$19.9K+8.6%FR$Frongusnew$27.7K+282.0%FR$Frongusnew$23.8K+96.8%MO$MONKEYHOODnew$11.7K+0.0%PO$Pokémonnew$152K+29.4%$倪萍new$142K+1380.0%MO$MOGZnew$50.4K+594.0%FR$Frongusnew$62.8K+764.0%FR$Frongusnew$15.5K+228.0%MA$MAKERSnew$85.0K+20.6%FR$Frongusnew$40.7K+236.0%FR$Frongusnew$50.1K+30.1%$Frongusnew$12.3K+28.0%BA$BASECATnew$8.2M-0.2%$JOBnew$64.5K+48.4%AS$ASIMOVnew$53.2K+354.0%$Alicenew$26.6K+102.0%NU$NULLVOLEnew$155K+155.0%AS$ASIMOVnew$25.2K+115.0%$‮emssiknew$1.0M+17.6%PL$PLUMBERnew$16.3K+78.6%$NIVInew$352K+595.0%FR$Frongusnew$56.3K+673.0%MO$MOGZnew$55.8K+667.0%FR$Frongusnew$43.5K+259.0%$Chewsnew$59.5K+548.0%NO$NORTHOODnew$11.7K+-0.0%$SOULnew$51.2K-58.8%FR$Frongusnew$49.7K+424.0%EA$EARTHnew$12.5K+216.0%$USDPnew$147M+351433.0%$VEIL$710K-37.6%$PAID$2.6M-0.6%$BATON$5.5M-1.9%$DARK$791K-20.1%$XTO$13.5M-3.2%$MISTAKE$12.2K-98.4%$HOOKED$1.1M+11.0%$E/ACC$444K+8.2%
Website blueprint · 6 h ago

launchfair.xyz

“fair: the fair launch on pump.fun.”

Template-written 25 evidence items REA analysed 20 scripts
What this means for you

launchfair.xyz only talked to its own servers while we watched.E1

  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E24

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /api/auth/me, /api/boardE13E14
Wallet code PhantomE8E24E25
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The site describes itself as: “Private-bundle launches on pump.fun: block 0 sealed, a 2% guard that dumps on the first sniper, and copycats bounced before they're signed. ”E2
  • It's built with Next.js and React (common tools for building web apps).E6E7
  • In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E9E10E11
  • It has sections such as /how-it-works, /docs, /create and /c.E23
  • While loading, it called 2 endpoints on its own servers, such as /api/auth/me and /api/board.E13E14

Where your data goes

On a first visit the page only talked to its own servers (launchfair.xyz).

Crypto and wallets

  • Wallet tools in the code: Phantom.E8
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E24
  • signMessage: asks a wallet to sign a message.E25

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E24

signTransaction

Connecting your wallet

It connects to crypto wallets using Phantom, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E8

PhantomsignTransactionsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/me, /api/auth/nonce, /api/auth/verify and /api/auth/logout).E13E16E17

/api/auth/me/api/auth/nonce/api/auth/verify/api/auth/logout

Loading its content

Its content loads from its own API while you browse (/api/auth/me and /api/board).E13E14

/api/auth/me/api/board

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Saving data on your device

It saves data in your browser (IndexedDB (a browser database) and localStorage), so some things persist between visits.E10E11E5

indexeddblocal_storageIndexedDB

Cookies and storage

Names only. We never store the values.

IndexedDBE5: fair-wallet

Pages and API calls

Pages it links to

//how-it-works/docs/create/c

Endpoints

Called while loading (seen) or named in the code (code).

launchfair.xyz/api/auth/meseenE13
launchfair.xyz/api/boardseenE14
/api/boardcodeE15
/api/auth/noncecodeE16
/api/auth/verifycodeE17
/api/wallet/balancecodeE18
/api/auth/logoutcodeE19
/api/wallet/sendcodeE20
/api/wallet/blockhashcodeE21
/api/wallet/activitycodeE22

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: fair: the fair launch on pump.fun.
page title · https://launchfair.xyz/
E2
Page description: Private-bundle launches on pump.fun: block 0 sealed, a 2% guard that dumps on the first sniper, and copycats bounced before they're signed. 0.035 SOL
page description · https://launchfair.xyz/
E3
Main heading: FAIR LAUNCH.
page h1 · https://launchfair.xyz/
E4
34 request(s) to launchfair.xyz
types: 11 fetch, 10 script, 7 image
GET https://launchfair.xyz/ · fetch · 34 requests · network recording
E5
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: fair-wallet · values not stored
E6
Next.js detected by REA (next-runtime)
confidence: high
launchfair.xyz/ · “next-runtime” · REA analyze-web-bundle 6.4.0
E7
React detected by REA (react-runtime)
confidence: medium
launchfair.xyz/_next/static/chunks/fd9d1056-1b2ccf077fca0a0e.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E8
Phantom found in the code
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:4703 · “window.phantom” · pattern scan
E9
Uses the browser ability: clipboard_write
can copy text to your clipboard
launchfair.xyz/_next/static/chunks/app/page-17f4d3d33825416e.js @ 1:6865 · “clipboard.writeText(” · pattern scan
E10
Uses the browser ability: indexeddb
stores data in your browser's built-in database
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:788 · “indexedDB.open(” · pattern scan
E11
Uses the browser ability: local_storage
saves small bits of data in your browser
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:1151 · “localStorage.setItem(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
launchfair.xyz/_next/static/chunks/app/page-17f4d3d33825416e.js @ 1:5355 · “getContext("2d"” · pattern scan
E13
The page called /api/auth/me on launchfair.xyz (GET)
GET https://launchfair.xyz/api/auth/me · fetch · network recording
E14
The page called /api/board on launchfair.xyz (GET)
GET https://launchfair.xyz/api/board · fetch · network recording
E15
REA found the endpoint /api/board
how: call:fetch
launchfair.xyz/_next/static/chunks/app/page-17f4d3d33825416e.js @ 1:2545 · “/api/board” · REA analyze-web-bundle 6.4.0
E16
The code names the endpoint /api/auth/nonce
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:8267 · “/api/auth/nonce” · pattern scan
E17
The code names the endpoint /api/auth/verify
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:8365 · “/api/auth/verify” · pattern scan
E18
The code names the endpoint /api/wallet/balance
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:8899 · “/api/wallet/balance” · pattern scan
E19
The code names the endpoint /api/auth/logout
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:9560 · “/api/auth/logout” · pattern scan
E20
The code names the endpoint /api/wallet/send
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:9887 · “/api/wallet/send” · pattern scan
E21
The code names the endpoint /api/wallet/blockhash
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:11234 · “/api/wallet/blockhash” · pattern scan
E22
The code names the endpoint /api/wallet/activity
launchfair.xyz/_next/static/chunks/app/layout-fcc153d216c6dc46.js @ 1:8467 · “/api/wallet/activity” · pattern scan
E23
10 links to pages on the same site
page links · https://launchfair.xyz/ · /, /how-it-works, /docs, /create, /c
E24
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:7861 · “signTransaction” · pattern scan
E25
Wallet request in code: signMessage
asks a wallet to sign a message
launchfair.xyz/_next/static/chunks/793-065f4988a055b18b.js @ 1:7717 · “signMessage” · pattern scan

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 4 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id PxlUL0iZ.