trenchcoat
Free · no sign-up
Website report · 03 Nov 2026

fungolabs.org

“Fungo Labs · The first encrypted NFTs on Ethereum”

Template-written 18 evidence items Code reader analysed 7 scripts
What this means for you

Fungo Labs talked to 1 outside service on a first visit, including 1 that measures visits or shows ads.E6

  • An AI agent used the site and saw 1 of 3 claimed features working.E13E14E17E15E16E18
  • On-chain / smart contracts: NFTs mint sealed, with art the holder can publish, and an essence that stays encrypted on-ch: The homepage, launchpad and 'How it works' pages describe the encrypted NFTs, but I found no contract address and no live mint. Viewing or publishing an NFT needs a wallet signature and holding an NFT, and I could not do either here. Clicking 'SHOW ANOTHER NFT' switched the sample card from #1729 to #0042 with new hex 'ciphertext handle' values, and the page made no network calls when that happeneE13E14E17
  • Extra observation: the whitelist checker loads data from the site's own backend: The /checker/ page called fungolabs.org/api/list and showed a whitelist of 500 X handles that you can page through. Seeing your own status needs an X sign-in, and the page says applications are closed.E15
  • Extra observation: launchpad and campaign pages: The launchpad page has interactive visual demos (sealing styles, a channel-switch demo, a game card demo), and I did not see them make any blockchain calls. The linked '$FUNGO AIRDROP' campaign says 2,841 joined and needs an X sign-in to take part.E16E18
  • Tech check: the site mentions on-chain / smart contracts, but we found nothing behind it in what its public page loads.E11
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E6

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

On-chain / smart contracts

“…it public when you choose. Its essence stays encrypted on-chain forever: only its holder decides who sees it. CHECK YO…”E11

No matching code, calls or services in what loaded for us.

Calls its own backend /api/configE8
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

On-chain / smart contracts: NFTs mint sealed, with art the holder can publish, and an essence that stays encrypted…

The homepage, launchpad and 'How it works' pages describe the encrypted NFTs, but I found no contract address and no live mint. Viewing or publishing an NFT needs a wallet signature and holding an NFT, and I could not do either here. Clicking 'SHOW ANOTHER NFT' switched the sample card from #1729 to #0042 with new hex 'ciphertext handle' values, and the page made no network calls when that happeneE13E14E17

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

the whitelist checker loads data from the site's own backend

The /checker/ page called fungolabs.org/api/list and showed a whitelist of 500 X handles that you can page through. Seeing your own status needs an X sign-in, and the page says applications are closed.E15

Noticed

launchpad and campaign pages

The launchpad page has interactive visual demos (sealing styles, a channel-switch demo, a game card demo), and I did not see them make any blockchain calls. The linked '$FUNGO AIRDROP' campaign says 2,841 joined and needs an X sign-in to take part.E16E18

What it is

  • The Internet Archive first saved this site on 2026-10-05 (28 days ago).E12
  • The site describes itself as: “The first encrypted NFTs on Ethereum. Private by design: every NFT mints sealed, only its holder decides who looks inside, and the art goes ”E2
  • Notable building blocks in its code: Three.js (3D graphics).E7
  • It has sections such as /checker, /launchpad, /apply and /privacy.E10
  • While loading, it called 1 endpoint on its own servers, such as /api/config.E8

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6

How key features work

Loading its content

Its content loads from its own API while you browse (/api/config).E8

/api/config

Drawing and editing in the browser

The page draws and edits graphics in your browser using Three.js (3D graphics).E7

Three.js (3D graphics)

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Pages and API calls

Pages it links to

//checker/launchpad/apply/privacy

Endpoints

Called while loading (seen) or named in the code (code).

fungolabs.org/api/configseenE8
/api/configcodeE9

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Fungo Labs · The first encrypted NFTs on Ethereum
page title · https://fungolabs.org/
E2
Page description: The first encrypted NFTs on Ethereum. Private by design: every NFT mints sealed, only its holder decides who looks inside, and the art goes public onl
page description · https://fungolabs.org/
E3
Site name: Fungo Labs
page site_name · https://fungolabs.org/
E4
Main heading: THE FIRST ENCRYPTED NFTS ON ETHEREUM.
page h1 · https://fungolabs.org/
E5
13 request(s) to fungolabs.org
types: 7 script, 3 font, 1 document
GET https://fungolabs.org/ · script · 13 requests · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E7
Three.js (3D graphics) found in the code
fungolabs.org/assets/tokens-IwDJjNpb.js @ 3823:16857 · “WebGLRenderer” · pattern scan
E8
The page called /api/config on fungolabs.org (GET)
GET https://fungolabs.org/api/config · fetch · network recording
E9
Code reader found the endpoint /api/config
how: call:fetch
fungolabs.org/assets/main-CwQ2rEQ0.js @ 2:30187 · “/api/config” · the code reader
E10
5 links to pages on the same site
page links · https://fungolabs.org/ · /, /checker, /launchpad, /apply, /privacy
E11
The site says: “…it public when you choose. Its essence stays encrypted on-chain forever: only its holder decides who sees it. CHECK YO…”
page text · https://fungolabs.org/ · …it public when you choose. Its essence stays encrypted on-chain forever: only its holder decides who sees it. CHECK YO…
E12
The Internet Archive first saved fungolabs.org on 2026-10-05 and has snapshots from 6 different days
page web archive · https://web.archive.org/web/20261005213654/fungolabs.org
E13
Agent step 1: view
AI agent step 1 · view on /
E14
Agent step 2: click SHOW ANOTHER NFT
AI agent step 2 · click on /
E15
Agent step 3: go /checker/
AI agent step 3 · go on /checker/ · page called GET fungolabs.org/api/me, GET fungolabs.org/api/config, GET fungolabs.org/api/list
E16
Agent step 4: go /launchpad
AI agent step 4 · go on /launchpad/ · page called GET fungolabs.org/launchpad/api/time, GET fungolabs.org/launchpad/assets/genesis-UluMy1zH.json, GET fungolabs.org/launchpad/api/config, GET fungolabs.org/launchpad/api/auth/me
E17
Agent step 5: go /launchpad/how
AI agent step 5 · go on /launchpad/how · page called GET fungolabs.org/launchpad/api/time, GET fungolabs.org/launchpad/api/config, GET fungolabs.org/launchpad/api/campaigns/featured, GET fungolabs.org/launchpad/api/auth/me
E18
Agent step 6: go /launchpad/c/cfpdxjt4
AI agent step 6 · go on /launchpad/c/cfpdxjt4 · page called GET fungolabs.org/launchpad/api/time, GET fungolabs.org/launchpad/api/config, GET fungolabs.org/launchpad/api/campaigns/featured, GET fungolabs.org/launchpad/api/auth/me, GET fungolabs.org/launchpad/api/campaigns/c/cfpdxjt4, GET fungolabs.org/launchpad/api/campaigns/c/cfpdxjt4/posts

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id YwZL1yQO.