TRENCHCOAT
Website blueprint · 27 Oct 2026

doxpad.xyz

“Doxpad: the Solana launchpad where every dev is on record”

Template-written 24 evidence items REA analysed 20 scripts
What this means for you

Doxpad only talked to its own servers while we watched.E1

  • Tech check: the site claims on-chain / smart contracts and trading / swaps / bots, and its public page shows matching evidence.E23E24E21E22E21
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E21

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…PBEFsqC21iiDMZwhQgwGVZ6o25X7pump Doxpad records public onchain history and public X profile data. Nothing here is fin…”E23

Wallet requests in its code: signTransaction, signMessageE21E22

Evidence found

Trading / swaps / bots

“…read from each pool on mainnet. coin dev mcap bonding dex fund checks No coins have launched on Doxpad yet. The…”E24

Transaction requests to your wallet: signTransactionE21

Calls its own backend /api/lookup/featuredE10
Wallet code PhantomE7E21E22
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The site describes itself as: “Every launch is tied to the dev’s X account. Launches, bonds and rugs follow them forever.”E2
  • It's built with Next.js and React (common tools for building web apps).E5E6
  • In your browser it can copy text to your clipboard.E8
  • It has sections such as /coins, /leaderboard, /burns, /launch, /docs and /verify.E20
  • While loading, it called 1 endpoint on its own servers, such as /api/lookup/featured.E10

Where your data goes

On a first visit the page only talked to its own servers (doxpad.xyz).

Crypto and wallets

  • Wallet tools in the code: Phantom.E7
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E21
  • signMessage: asks a wallet to sign a message.E22

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E21

signTransaction

Connecting your wallet

It connects to crypto wallets using Phantom, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E7

PhantomsignTransactionsignMessage

Loading its content

Its content loads from its own API while you browse (/api/lookup/featured).E10

/api/lookup/featured

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Pages and API calls

Pages it links to

//coins/leaderboard/burns/launch/docs/verify/status/changelog

Endpoints

Called while loading (seen) or named in the code (code).

doxpad.xyz/api/lookup/featuredseenE10
/api/launch/buildcodeE11
/api/launch/confirmcodeE12
/api/rpccodeE13
/api/lookup/featuredcodeE14
/api/verify/startcodeE15
/api/verify/signcodeE16
/api/verify/checkcodeE17
/api/leaderboardcodeE18
/api/lookupcodeE19

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Doxpad: the Solana launchpad where every dev is on record
page title · https://doxpad.xyz/
E2
Page description: Every launch is tied to the dev’s X account. Launches, bonds and rugs follow them forever.
page description · https://doxpad.xyz/
E3
Site name: Doxpad
page site_name · https://doxpad.xyz/
E4
31 request(s) to doxpad.xyz
types: 13 script, 10 fetch, 3 font
GET https://doxpad.xyz/ · script · 31 requests · network recording
E5
Next.js detected by REA (next-runtime)
confidence: high
doxpad.xyz/ · “next-runtime” · REA analyze-web-bundle 6.4.0
E6
React detected by REA (react-runtime)
confidence: medium
doxpad.xyz/_next/static/chunks/117-9776bcfde68b9ed6.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E7
Phantom found in the code
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:8436 · “phantom.app” · pattern scan
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
doxpad.xyz/_next/static/chunks/app/page-09795ec15a010321.js @ 1:19325 · “clipboard.writeText(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
doxpad.xyz/_next/static/chunks/app/page-09795ec15a010321.js @ 1:15776 · “getContext("2d"” · pattern scan
E10
The page called /api/lookup/featured on doxpad.xyz (GET)
GET https://doxpad.xyz/api/lookup/featured · fetch · network recording
E11
REA found the endpoint /api/launch/build
how: call:fetch
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:1136 · “/api/launch/build” · REA analyze-web-bundle 6.4.0
E12
REA found the endpoint /api/launch/confirm
how: call:fetch
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:1816 · “/api/launch/confirm” · REA analyze-web-bundle 6.4.0
E13
REA found the endpoint /api/rpc
how: call:fetch
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:9581 · “/api/rpc” · REA analyze-web-bundle 6.4.0
E14
REA found the endpoint /api/lookup/featured
how: call:fetch
doxpad.xyz/_next/static/chunks/app/page-09795ec15a010321.js @ 1:18975 · “/api/lookup/featured” · REA analyze-web-bundle 6.4.0
E15
REA found the endpoint /api/verify/start
how: call:fetch
doxpad.xyz/_next/static/chunks/app/verify/page-f2ae4336bc2b829a.js @ 1:609 · “/api/verify/start” · REA analyze-web-bundle 6.4.0
E16
REA found the endpoint /api/verify/sign
how: call:fetch
doxpad.xyz/_next/static/chunks/app/verify/page-f2ae4336bc2b829a.js @ 1:896 · “/api/verify/sign” · REA analyze-web-bundle 6.4.0
E17
REA found the endpoint /api/verify/check
how: call:fetch
doxpad.xyz/_next/static/chunks/app/verify/page-f2ae4336bc2b829a.js @ 1:1356 · “/api/verify/check” · REA analyze-web-bundle 6.4.0
E18
The code names the endpoint /api/leaderboard
doxpad.xyz/_next/static/chunks/app/page-09795ec15a010321.js @ 1:758 · “/api/leaderboard” · pattern scan
E19
The code names the endpoint /api/lookup
doxpad.xyz/_next/static/chunks/app/page-09795ec15a010321.js @ 1:18398 · “/api/lookup” · pattern scan
E20
9 links to pages on the same site
page links · https://doxpad.xyz/ · /, /coins, /leaderboard, /burns, /launch, /docs, /verify, /status, /changelog
E21
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:9525 · “signAllTransactions” · pattern scan
E22
Wallet request in code: signMessage
asks a wallet to sign a message
doxpad.xyz/_next/static/chunks/app/launch/page-8e32aae110a47579.js @ 1:9373 · “signMessage” · pattern scan
E23
The site says: “…PBEFsqC21iiDMZwhQgwGVZ6o25X7pump Doxpad records public onchain history and public X profile data. Nothing here is fin…”
page text · https://doxpad.xyz/ · …PBEFsqC21iiDMZwhQgwGVZ6o25X7pump Doxpad records public onchain history and public X profile data. Nothing here is fin…
E24
The site says: “…read from each pool on mainnet. coin dev mcap bonding dex fund checks No coins have launched on Doxpad yet. The…”
page text · https://doxpad.xyz/ · …read from each pool on mainnet. coin dev mcap bonding dex fund checks No coins have launched on Doxpad yet. The…

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 10 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id Qp8Dvzyx.