trenchcoat
Free · no sign-up
Website report · 1 h ago

punchcard.club

“Aloha Fish Company · $POKE — PunchCard”

Template-written 24 evidence items Code reader analysed 3 scripts
What this means for you

PunchCard talked to 5 outside services on a first visit, including 1 that measures visits or shows ads.E8

  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E8
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E22

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend none seen
Wallet code web3.js, Solana web3 / wallet adapter, PhantomE11E12E13E22
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2024-04-15 (940 days ago).E24
  • The site describes itself as: “Fresh fish and poké in Nashville since 2020, voted Best Poké in Nashville 2026. Meet the people behind Aloha Fish Company and its community ”E2
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and can open your device's share menu.E14E15E16
  • It has sections such as /launchpad and /terms.E21

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E8
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 6×E9
fonts.googleapis.comGoogle Fonts: fonts 1×E6
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 2
punchcard-launchpad.quiet-mode-468e.workers.devCloudflare: CDN and hosting 1×E10
unpkg.comunpkg: open-source file CDN 1×E7

Crypto and wallets

  • Wallet tools in the code: web3.js, Solana web3 / wallet adapter and Phantom.E11E12E13
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E22
  • signMessage: asks a wallet to sign a message.E23

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E22

signTransaction

Connecting your wallet

It connects to crypto wallets using web3.js, Solana web3 / wallet adapter, Phantom, signTransaction and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E11E12E13

web3.jsSolana web3 / wallet adapterPhantomsignTransactionsignMessage

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E17

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E8

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E15

local_storage

Pages and API calls

Pages it links to

//launchpad/terms

Endpoints

Called while loading (seen) or named in the code (code).

/api/places/suggestcodeE18
/api/memo-txcodeE19
/api/launch/first-buycodeE20

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Aloha Fish Company · $POKE — PunchCard
page title · https://punchcard.club/aloha-fish/
E2
Page description: Fresh fish and poké in Nashville since 2020, voted Best Poké in Nashville 2026. Meet the people behind Aloha Fish Company and its community token, $PO
page description · https://punchcard.club/aloha-fish/
E3
Site name: PunchCard
page site_name · https://punchcard.club/aloha-fish/
E4
Main heading: Aloha Fish Company
page h1 · https://punchcard.club/aloha-fish/
E5
12 request(s) to punchcard.club
types: 6 image, 3 script, 1 document
GET https://punchcard.club/aloha-fish/ · image · 12 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
1 request(s) to unpkg.com
types: 1 script
GET https://unpkg.com/@solana/web3.js@1.98.4/lib/index.iife.min.js · script · network recording
E8
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E9
6 request(s) to fonts.gstatic.com
types: 6 font
GET https://fonts.gstatic.com/s/specialelite/v20/XLYgIZbkc4JPUL5CVArUVL0ntnAOSA.woff2 · font · 6 requests · network recording
E10
1 request(s) to punchcard-launchpad.quiet-mode-468e.workers.dev
types: 1 fetch
GET https://punchcard-launchpad.quiet-mode-468e.workers.dev/api/coins/Cy3bFG4L4ZjZydoV7Ak4QRihRR1PZCNBjsMqgs9upKQR · fetch · network recording
E11
web3.js found in the code
punchcard.club/ (page HTML) @ 25:40 · “web3.js” · pattern scan
E12
Solana web3 / wallet adapter found in the code
punchcard.club/ (page HTML) @ 25:32 · “@solana/web3.js” · pattern scan
E13
Phantom found in the code
punchcard.club/launchpad/lp.js @ 52:21 · “window.phantom” · pattern scan
E14
Uses the browser ability: clipboard_write
can copy text to your clipboard
punchcard.club/launchpad/featured.js @ 39:25 · “clipboard.writeText(” · pattern scan
E15
Uses the browser ability: local_storage
saves small bits of data in your browser
punchcard.club/launchpad/lp.js @ 134:9 · “localStorage.setItem(” · pattern scan
E16
Uses the browser ability: web_share
can open your device's share menu
punchcard.club/launchpad/featured.js @ 38:38 · “navigator.share(” · pattern scan
E17
Uses the browser ability: canvas
draws graphics on a canvas
punchcard.club/launchpad/lp.js @ 326:9 · “getContext('2d'” · pattern scan
E18
The code names the endpoint /api/places/suggest
punchcard.club/launchpad/lp.js @ 203:28 · “/api/places/suggest” · pattern scan
E19
The code names the endpoint /api/memo-tx
punchcard.club/launchpad/lp.js @ 243:29 · “/api/memo-tx” · pattern scan
E20
The code names the endpoint /api/launch/first-buy
punchcard.club/launchpad/lp.js @ 337:27 · “/api/launch/first-buy” · pattern scan
E21
5 links to pages on the same site
page links · https://punchcard.club/aloha-fish/ · /, /launchpad, /terms
E22
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
punchcard.club/launchpad/lp.js @ 42:56 · “signTransaction” · pattern scan
E23
Wallet request in code: signMessage
asks a wallet to sign a message
punchcard.club/launchpad/lp.js @ 290:23 · “signMessage” · pattern scan
E24
The Internet Archive first saved punchcard.club on 2024-04-15 and has snapshots from 5 different days
page web archive · https://web.archive.org/web/20240415184231/punchcard.club

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id W4RkFFr9.