Bags talked to 12 outside services on a first visit, including 2 that measure visits or show ads.E7E17
Before you click anything, the page loads analytics or ad services: Amplitude.E7E17
10 cookies were set in your browser, 3 of them by other companies' domains.E24E28E29
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, raise token spending approvals, sign structured data (logins, orders or off-chain approvals) and 3 more. Read every wallet pop-up before approving.E225E232E233E226E227E231
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).
Calls its own backend/api/v1/token-launch/top-tokens/lifetime-fees, /api/v1/user/nvidia, /api/earningsE53E54E55E56
Contract calls in its codeaggregate3, isValidSignature, isValidSigE235E236E237E238
Talks to AI servicesnone seen
Live connectionskeeps a live two-way connection open to a serverE50
What it is
The site describes itself as: “Trade $nvidia's coins on Bags — every trade earns the creator 1%.”E2
It's built with Next.js and React (common tools for building web apps).E33E34
Notable building blocks in its code: Socket.IO (live connection) and Firebase SDK.E35E36
In your browser it stores data in your browser's built-in database, saves small bits of data in your browser and keeps a live two-way connection open to a server.E48E49E50
It has sections such as /launch, /api/v1/analytics_events, /api/v1/apps/:app_id, /api/v1/funding/coinbase_on_ramp/init, /api/v1/funding/coinbase_on_ramp/status and /api/v1/apps/:app_id/cross-app/connections.E162E163
While loading, it called 9 endpoints on its own servers, such as /api/v1/token-launch/top-tokens/lifetime-fees, /api/v1/user/nvidia, /api/earnings and 6 more.E53E54E55E56
Where your data goes
Analytics & trackingCount visits and record what you do on the page.2
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, wagmi, viem, Coinbase Wallet SDK, thirdweb and 3 more.E39E40E41E42E43E44
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E225
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E232
increaseAllowance: has code to raise a token spending approval.E233
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E226
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E227
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E231
Contract functions the app calls by name: aggregate3, isValidSignature, isValidSig, addr, resolveWithGateways, tokenURI, uri, text and 22 more.E235E236E237E238E239E240
Chains named in the code: BNB Smart Chain, Ethereum, Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji, Celo Mainnet, OP Mainnet and 12 more.E295E296E297E298E299E300
30 contract or wallet addresses are written into the code, including Multicall3 (batches read calls), USDC on Ethereum and USDC on Base.E265E269E275
30 addresses found in the code
0xca11bde05977b3631167028862be2a173976ca11 · Multicall3 (batches read calls)0xeeeeeeee14d718c2b47d9923deab1335e144eeee0xaacc0000000000000000000000000000000000000x51653000000000000000000000000000000000000xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on 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
Paste any of these into the box on the home page to get the contract's blueprint.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, increaseAllowance, eth_signTypedData and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E225E232E233E226E227E231
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, wagmi, viem and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E39E40E41E42E43E44
It reads blockchain data (BNB Smart Chain, Ethereum, Arbitrum One, Arbitrum Sepolia and 4 more) to show balances, prices or contract state.E295E296E297E14
Sign-in and account features show up in its code or traffic (/api/v1/user/nvidia, /api/v1/token-launch/user/tokens, /auth/token and /auth/mfa/status).E54E58E65
It keeps live connections open (WebSockets, Socket.IO (live connection) and nexus-websocket-a.intercom.io) so content updates without reloading.E50E35E19
Its content loads from its own API while you browse (/api/v1/token-launch/top-tokens/lifetime-fees, /api/v1/user/nvidia, /api/earnings, /api/claimable-positions and 2 more).E53E54E55E56E57
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: @nvidia sent you an invite
page title · https://bags.fm/@nvidia
E2
Page description: Trade $nvidia's coins on Bags — every trade earns the creator 1%.
page description · https://bags.fm/@nvidia
E3
Site name: Bags
page site_name · https://bags.fm/@nvidia
E4
Main heading: @nvidia
page h1 · https://bags.fm/@nvidia
E5
122 request(s) to bags.fm
types: 81 script, 24 font, 8 fetch
GET https://bags.fm/@nvidia · script · 122 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
2 request(s) to sr-client-cfg.amplitude.com
types: 2 fetch
GET https://sr-client-cfg.amplitude.com/config/b1f54bac8e07a4e80b48d163c881f546 · fetch · 2 requests · network recording
E8
1 request(s) to widget.intercom.io
types: 1 script
GET https://widget.intercom.io/widget/pp3uldkc · script · network recording
E9
1 request(s) to explorer-api.walletconnect.com
types: 1 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · fetch · network recording
E10
5 request(s) to api2.bags.fm
types: 5 xhr
GET https://api2.bags.fm/api/v1/token-launch/top-tokens/lifetime-fees · xhr · 5 requests · network recording
E11
39 request(s) to auth.privy.io
types: 34 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cm7m1jjj900ks13jd6kmrv20s · script · 39 requests · network recording
E12
11 request(s) to js.intercomcdn.com
types: 9 script, 2 image
GET https://js.intercomcdn.com/frame-modern.015dd18a.js · script · 11 requests · network recording
E13
2 request(s) to api-iam.intercom.io
types: 2 xhr
GET https://api-iam.intercom.io/messenger/web/launcher_settings · xhr · 2 requests · network recording
E14
1 request(s) to gene-v4mswe-fast-mainnet.helius-rpc.com
types: 1 xhr
GET https://gene-v4mswe-fast-mainnet.helius-rpc.com/ · xhr · network recording
E15
5 request(s) to datapi.jup.ag
types: 5 xhr
GET https://datapi.jup.ag/v1/assets/search · xhr · 5 requests · network recording
E16
1 request(s) to wsrv.nl
types: 1 image
GET https://wsrv.nl/ · image · network recording
E17
1 request(s) to api2.amplitude.com
types: 1 fetch
GET https://api2.amplitude.com/2/httpapi · fetch · network recording
E18
1 request(s) to nats.bags.fm
types: 1 websocket
GET wss://nats.bags.fm/ · websocket · network recording
E19
1 request(s) to nexus-websocket-a.intercom.io
types: 1 websocket
GET wss://nexus-websocket-a.intercom.io/pubsub/5-axNCHb5eStjOSYUEvkEAQavbdcyTSmaPb59ODFU2QYTMiuTEFNAysSa7woS65LtIBkRtXH9NHfwZkhQ… · websocket · network recording
E20
Cookie '_dd_s_v2' set for bags.fm
kept for about 365 days
cookie _dd_s_v2 on bags.fm · value not stored
E21
Cookie 'AMP_MKTG_b1f54bac8e' set for bags.fm
kept for about 365 days
cookie AMP_MKTG_b1f54bac8e on bags.fm · value not stored
E22
Cookie 'invited_by' set for bags.fm
kept for about 30 days
cookie invited_by on bags.fm · value not stored
E23
Cookie 'AMP_b1f54bac8e' set for bags.fm
kept for about 365 days
cookie AMP_b1f54bac8e on bags.fm · value not stored
E24
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E25
Cookie 'intercom-id-pp3uldkc' set for bags.fm
kept for about 270 days
cookie intercom-id-pp3uldkc on bags.fm · value not stored
E26
Cookie 'intercom-session-pp3uldkc' set for bags.fm
kept for about 7 days
cookie intercom-session-pp3uldkc on bags.fm · value not stored
E27
Cookie 'intercom-device-id-pp3uldkc' set for bags.fm
kept for about 270 days
cookie intercom-device-id-pp3uldkc on bags.fm · value not stored
E28
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
REA hit its size budget on parts of 61 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id WzByGpYN.
$ELON2028new
$AKGnew
$人人富new
$VICECITYnew
$PENCHANTSnew
$DOASnew
$MrBeastnew
$CYBERCATnew
$OpenAInew
$BLUNTSnew
$PENCHANTSnew
$SpaceXnew
$Kittypantsnew
$GANGnew
$PENCHANTSnew
$VEIL
$PAID
$BATON
$DARK
$XTO
$MISTAKE
$HOOKED
$E/ACC