trenchcoat
Free · no sign-up
Website report · 1 h ago

quantumorb.app

“QuantumOrb Scanner”

Template-written 35 evidence items Code reader analysed 1 scripts
What this means for you

quantumorb.app talked to 3 outside services on a first visit, including 1 that measures visits or shows ads.E6

  • An AI agent used the site and saw 1 of 1 claimed features working.E31E33E35
  • Live data / analytics: I watched the dashboard across several steps and the counters changed. 'Held by Shield · 24H' went from 10,843 to 10,844, 'Launches · 24H' from 16,416 to 16,421 and 'Scans · 24H' from 303 to 304, and new rows appeared in the Recently Scanned and Radar feeds. 'Alerts sent · 24H' stayed at 0 the whole time, and the bot alerts panel is labelled 'SOON'.E31E33E35
  • Also noticed, Market panel toggle responds: Clicking 'Busiest right now' switched the table from curve-progress rankings to a list ranked by trades in the last 5 minutes, with new tokens and figures. The browser logged no network calls, though, even while the data updated.E35
  • Also noticed, Token scanner input not exercised: The sandbox blocked me from typing into the token address field, so I couldn't try the scanner itself.E34
  • Tech check: the site claims live data / analytics, and its public page shows matching evidence.E29E11E12E14
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E6

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Live data / analytics

“…HELD BY SHIELD · 24H 10,843 kept out · what is Shield? ALERTS SENT · 24H 0 by the bot · what it sends ◆ Recently sca…”E29

Live connections: keeps a live two-way connection open to a server, receives a live stream of updates from a serverE11E12

Calls to its own backend: /api/stats/checks, /api/launches/grid, /api/tapeE14E15E16E17

Calls its own backend /api/stats/checks, /api/launches/grid, /api/tapeE14E15E16E17
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a server, receives a live stream of updates from a serverE11E12

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

Live data / analytics

I watched the dashboard across several steps and the counters changed. 'Held by Shield · 24H' went from 10,843 to 10,844, 'Launches · 24H' from 16,416 to 16,421 and 'Scans · 24H' from 303 to 304, and new rows appeared in the Recently Scanned and Radar feeds. 'Alerts sent · 24H' stayed at 0 the whole time, and the bot alerts panel is labelled 'SOON'.E31E33E35

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Market panel toggle responds

Clicking 'Busiest right now' switched the table from curve-progress rankings to a list ranked by trades in the last 5 minutes, with new tokens and figures. The browser logged no network calls, though, even while the data updated.E35

Noticed

Token scanner input not exercised

The sandbox blocked me from typing into the token address field, so I couldn't try the scanner itself.E34

What it is

  • The Internet Archive first saved this site on 2026-10-12 (24 days ago).E30
  • The site describes itself as: “Paste a Solana memecoin address and see how many real operators hold it, what the owner can still change, who controls the liquidity, and ho”E2
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser, keeps a live two-way connection open to a server and receives a live stream of updates from a server.E9E10E11E12
  • While loading, it called 7 endpoints on its own servers, such as /api/stats/checks, /api/launches/grid, /api/tape and 4 more.E14E15E16E17

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 2×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E5

How key features work

Live updates

It keeps live connections open (WebSockets and server-sent events) so content updates without reloading.E11E12

websocketevent_source

Loading its content

Its content loads from its own API while you browse (/api/stats/checks, /api/launches/grid, /api/tape, /api/pulse and 2 more).E14E15E16E17E18

/api/stats/checks/api/launches/grid/api/tape/api/pulse/api/recent/api/launches

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E13

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10E8

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE8: qo-client

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

quantumorb.app/api/stats/checksseenE14
quantumorb.app/api/launches/gridseenE15
quantumorb.app/api/tapeseenE16
quantumorb.app/api/pulseseenE17
quantumorb.app/api/recentseenE18
quantumorb.app/api/launchesseenE19
quantumorb.app/api/alerts/recentseenE20
/api/tokencodeE21
/api/creatorcodeE22
/api/controlcodeE23
/api/scancodeE24
/api/scan/eventscodeE25
/api/earlycodeE26
/api/bot-linkcodeE27

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: QuantumOrb Scanner
page title · https://quantumorb.app/
E2
Page description: Paste a Solana memecoin address and see how many real operators hold it, what the owner can still change, who controls the liquidity, and how the firs
page description · https://quantumorb.app/
E3
Main heading: 20 wallets can be 4 people. See who really holds it.
page h1 · https://quantumorb.app/
E4
13 request(s) to quantumorb.app
types: 9 fetch, 1 document, 1 image
GET https://quantumorb.app/ · fetch · 13 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E7
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.w… · font · 2 requests · network recording
E8
localStorage: 1 key(s) saved in your browser
localStorage keys: qo-client · values not stored
E9
Uses the browser ability: clipboard_write
can copy text to your clipboard
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:68792 · “clipboard.writeText(” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:24644 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: websocket
keeps a live two-way connection open to a server
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:25281 · “new WebSocket(” · pattern scan
E12
Uses the browser ability: event_source
receives a live stream of updates from a server
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26362 · “new EventSource(” · pattern scan
E13
Uses the browser ability: canvas
draws graphics on a canvas
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:35941 · “getContext("2d"” · pattern scan
E14
The page called /api/stats/checks on quantumorb.app (GET)
GET https://quantumorb.app/api/stats/checks · fetch · network recording
E15
The page called /api/launches/grid on quantumorb.app (GET)
GET https://quantumorb.app/api/launches/grid · fetch · network recording
E16
The page called /api/tape on quantumorb.app (GET)
GET https://quantumorb.app/api/tape · fetch · network recording
E17
The page called /api/pulse on quantumorb.app (GET)
GET https://quantumorb.app/api/pulse · fetch · network recording
E18
The page called /api/recent on quantumorb.app (GET)
GET https://quantumorb.app/api/recent · fetch · network recording
E19
The page called /api/launches on quantumorb.app (GET)
GET https://quantumorb.app/api/launches · fetch · network recording
E20
The page called /api/alerts/recent on quantumorb.app (GET)
GET https://quantumorb.app/api/alerts/recent · fetch · network recording
E21
The code names the endpoint /api/token
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26066 · “/api/token” · pattern scan
E22
The code names the endpoint /api/creator
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26123 · “/api/creator” · pattern scan
E23
The code names the endpoint /api/control
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26182 · “/api/control” · pattern scan
E24
The code names the endpoint /api/scan
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26243 · “/api/scan” · pattern scan
E25
The code names the endpoint /api/scan/events
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26379 · “/api/scan/events” · pattern scan
E26
The code names the endpoint /api/early
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:26754 · “/api/early” · pattern scan
E27
The code names the endpoint /api/bot-link
quantumorb.app/assets/app.b7c8b4bd38.js @ 1:27323 · “/api/bot-link” · pattern scan
E28
1 links to pages on the same site
page links · https://quantumorb.app/ · /
E29
The site says: “…HELD BY SHIELD · 24H 10,843 kept out · what is Shield? ALERTS SENT · 24H 0 by the bot · what it sends ◆ Recently sca…”
page text · https://quantumorb.app/ · …HELD BY SHIELD · 24H 10,843 kept out · what is Shield? ALERTS SENT · 24H 0 by the bot · what it sends ◆ Recently sca…
E30
The Internet Archive first saved quantumorb.app on 2026-10-12 and has snapshots from 1 different days
page web archive · https://web.archive.org/web/20261012042342/quantumorb.app
E31
Agent step 1: view
AI agent step 1 · view on /
E32
Agent step 2: click what is Shield?
AI agent step 2 · click on /
E33
Agent step 3: view
AI agent step 3 · view on /
E34
Agent step 4: type Token address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 4 · type on /
E35
Agent step 5: click BUSIEST RIGHT NOW
AI agent step 5 · click on /

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id dqLNhd4x.