trenchcoat
Free · no sign-up
Website report · 39 min ago

christmax.fun

“$CHRISTMAX — 24 Days. One Christmas Pool.”

Template-written 22 evidence items Code reader analysed 9 scripts
What this means for you

christmax.fun talked to 2 outside services on a first visit.E6E5

  • Tech check: the site claims wallet connection and live data / analytics, and its public page shows matching evidence.E19E21E11E18E17
  • Tech check: the site mentions staking / yield, but we found nothing behind it in what its public page loads.E20
  • We saw no known analytics or advertising services load on the first visit.E1
  • 2 cookies were set in your browser, all by the site itself.E7E8

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“…One community. One Christmas pool. Endless surprises. Connect Wallet Explore the Calendar The Christmas Calendar opens in 1…”E19

Wallet libraries in its code: PhantomE11

Wallet requests in its code: personal_sign, eth_requestAccountsE18E17

Nothing found on the public page

Staking / yield

“…rules. 1.Trading fees contribute to a shared Christmas rewards pool. 2.Eligible token holders receive access to their own…”E20

No matching code, calls or services in what loaded for us.

Evidence found

Live data / analytics

“…l, reward distributions and claims will appear here in real time once $CHRISTMAX is live. View all activity”E21

Calls to its own backend: /__l5e/trackeventsE14

Calls its own backend /__l5e/trackeventsE14
Wallet code PhantomE11E18E17
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive has never saved this site, so it is probably new.E22
  • The site describes itself as: “The Christmas rewards platform on Solana: 24 advent doors, one shared prize pool, a surprise for every holder.”E2
  • It's built with React (common tools for building web apps).E9
  • Notable building blocks in its code: Supabase client.E10
  • In your browser it saves small bits of data in your browser.E12
  • It has sections such as /my-calendar, /leaderboard and /activity.E16
  • While loading, it called 1 endpoint on its own servers, such as /__l5e/trackevents.E14

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E6
fonts.googleapis.comGoogle Fonts: fonts 1×E5

Crypto and wallets

  • Wallet tools in the code: Phantom.E11
  • personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E18
  • eth_requestAccounts: asks to connect your wallet, which shows the site your address.E17

How key features work

Connecting your wallet

It connects to crypto wallets using Phantom, personal_sign and eth_requestAccounts. Connecting shows the site your wallet address; it doesn't move funds by itself.E11E17

Phantompersonal_signeth_requestAccounts

Loading its content

Its content loads from its own API while you browse (/__l5e/trackevents).E14

/__l5e/trackevents

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E12

local_storage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__dplE7christmax.fun about 1 daysthe site
__cf_bmE8christmax.fun about 0 daysthe site

Pages and API calls

Pages it links to

//my-calendar/leaderboard/activity

Endpoints

Called while loading (seen) or named in the code (code).

christmax.fun/__l5e/trackeventsseenE14
/api/broadcastcodeE15

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: $CHRISTMAX — 24 Days. One Christmas Pool.
page title · https://christmax.fun/
E2
Page description: The Christmas rewards platform on Solana: 24 advent doors, one shared prize pool, a surprise for every holder.
page description · https://christmax.fun/
E3
Main heading: $CHRISTMAX
page h1 · https://christmax.fun/
E4
13 request(s) to christmax.fun
types: 6 script, 3 fetch, 2 image
GET https://christmax.fun/ · script · 13 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 · font · 3 requests · network recording
E7
Cookie '__dpl' set for christmax.fun
kept for about 1 days
cookie __dpl on christmax.fun · value not stored
E8
Cookie '__cf_bm' set for christmax.fun
kept for about 0 days
cookie __cf_bm on christmax.fun · value not stored
E9
React detected by the code reader (react-runtime)
confidence: medium
christmax.fun/assets/index-DWup_DVU.js · “react-runtime” · the code reader
E10
Supabase client found in the code
christmax.fun/assets/index-DWup_DVU.js @ 13:62639 · “supabase-js” · pattern scan
E11
Phantom found in the code
christmax.fun/assets/index-DWup_DVU.js @ 23:121172 · “phantom.app” · pattern scan
E12
Uses the browser ability: local_storage
saves small bits of data in your browser
christmax.fun/assets/index-DWup_DVU.js @ 20:2497 · “localStorage.setItem(” · pattern scan
E13
Uses the browser ability: web_worker
runs work in a background thread
christmax.fun/assets/index-DWup_DVU.js @ 19:6124 · “new Worker(” · pattern scan
E14
The page called /__l5e/trackevents on christmax.fun (POST)
POST https://christmax.fun/__l5e/trackevents · fetch · network recording
E15
The code names the endpoint /api/broadcast
christmax.fun/assets/index-DWup_DVU.js @ 13:90835 · “/api/broadcast” · pattern scan
E16
4 links to pages on the same site
page links · https://christmax.fun/ · /, /my-calendar, /leaderboard, /activity
E17
Wallet request in code: eth_requestAccounts
asks to connect your wallet, which shows the site your address
christmax.fun/assets/index-DWup_DVU.js @ 22:23334 · “eth_requestAccounts” · pattern scan
E18
Wallet request in code: personal_sign
asks you to sign a text message (often to log in; moves no funds by itself)
christmax.fun/assets/index-DWup_DVU.js @ 22:24055 · “personal_sign” · pattern scan
E19
The site says: “…One community. One Christmas pool. Endless surprises. Connect Wallet Explore the Calendar The Christmas Calendar opens in 1…”
page text · https://christmax.fun/ · …One community. One Christmas pool. Endless surprises. Connect Wallet Explore the Calendar The Christmas Calendar opens in 1…
E20
The site says: “…rules. 1.Trading fees contribute to a shared Christmas rewards pool. 2.Eligible token holders receive access to their own…”
page text · https://christmax.fun/ · …rules. 1.Trading fees contribute to a shared Christmas rewards pool. 2.Eligible token holders receive access to their own…
E21
The site says: “…l, reward distributions and claims will appear here in real time once $CHRISTMAX is live. View all activity”
page text · https://christmax.fun/ · …l, reward distributions and claims will appear here in real time once $CHRISTMAX is live. View all activity
E22
The Internet Archive has no saved copy of christmax.fun
page web archive · https://web.archive.org/web/*/christmax.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id babucJHF.