Covert talked to 3 outside services on a first visit.E8E7E6
Tech check: the site claims on-chain / smart contracts, wallet connection and a working app / platform, and its public page shows matching evidence.E228E229E151E152E153
We saw no known analytics or advertising services load on the first visit.E1
3 cookies were set in your browser, 3 of them by other companies' domains.E9E10E11
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, raise token spending approvals, sign structured data (logins, orders or off-chain approvals) and 3 more. Read every wallet pop-up before approving.E141E148E149E142E143E147
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
On-chain / smart contracts
“…Trade Launch Portfolio Docs X COVERT.EXE - CS2 items, on-chain, with leverage File Edit View Trade Launch Help COVERT…”E228
Contract calls in its code: decimals, addr, resolveWithGatewaysE151E152E153E154
Blockchains named in its code: Polygon Amoy, Celo Mainnet, Avalanche FujiE208E209E210E211
Blockchain services it contacts: Privy, WalletConnect / ReownE8E7
Wallet requests in its code: eth_sign, approve, increaseAllowanceE141E148E149E142
Contract calls in its codedecimals, addr, resolveWithGatewaysE151E152E153E154
Talks to AI servicesnone seen
Live connectionsnone seen
What it is
The site describes itself as: “The first on-chain marketplace for CS2 items. Long or short knives, gloves, AWPs and cases with up to 10x leverage, marked to a live index b”E2
It's built with Next.js and React (common tools for building web apps).E14E15
Notable building blocks in its code: Socket.IO (live connection).E16
In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E24E25E26
It has sections such as /markets, /trade, /launch, /portfolio, /docs and /api.E78E79
While loading, it called 6 endpoints on its own servers, such as /api/platform-token, /api/cards, /markets/specialist-gloves-pillow-punchers-field-tested and 3 more.E28E29E30E31
Where your data goes
Crypto & walletsConnect wallets, read blockchains or fetch token prices.2
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, Coinbase Wallet SDK, thirdweb, Phantom and 1 more.E17E18E19E20E21E22
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E141
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E148
increaseAllowance: has code to raise a token spending approval.E149
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E142
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E143
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E147
Contract functions the app calls by name: decimals, addr, resolveWithGateways, tokenURI, uri, text, reverseWithGateways, findResolver and 19 more.E151E152E153E154E155E156
Chains named in the code: Polygon Amoy, Celo Mainnet, Avalanche Fuji, Arbitrum One, Monad, OP Mainnet, Avalanche, Zora and 12 more.E208E209E210E211E212E213
30 contract or wallet addresses are written into the code, including USDC on Ethereum and USDC on Base.E178E184
30 addresses found in the code
0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on 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
Paste any of these into the box on the home page to get the contract's blueprint.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, increaseAllowance, eth_signTypedData and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E141E148E149E142E143E147
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, Coinbase Wallet SDK and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E17E18E19E20E21E22
Sign-in and account features show up in its code or traffic (/api/v1/sessions, /api/v1/sessions/logout, /api/v1/users/me/accept_terms and /api/v1/custom_jwt_account/authenticate).E47E48E49
It keeps live connections open (Socket.IO (live connection)) so content updates without reloading.E16
Socket.IO (live connection)
Loading its content
Its content loads from its own API while you browse (/api/platform-token, /api/cards, /markets/specialist-gloves-pillow-punchers-field-tested, /trade/specialist-gloves-pillow-punchers-field-tested and 2 more).E28E29E30E31E32
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: Covert: The first on-chain marketplace for CS2 items
page title · https://covert.market/
E2
Page description: The first on-chain marketplace for CS2 items. Long or short knives, gloves, AWPs and cases with up to 10x leverage, marked to a live index built from
page description · https://covert.market/
E3
Site name: Covert
page site_name · https://covert.market/
E4
Main heading: COVERT
COVERT: THE FIRST ON-CHAIN MARKETPLACE FOR CS2 ITEMS
page h1 · https://covert.market/
E5
103 request(s) to covert.market
types: 55 fetch, 24 script, 9 stylesheet
GET https://covert.market/ · fetch · 103 requests · network recording
E6
29 request(s) to community.fastly.steamstatic.com
types: 29 image
GET https://community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM… · image · 29 requests · network recording
E7
5 request(s) to explorer-api.walletconnect.com
types: 3 image, 2 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · image · 5 requests · network recording
E8
39 request(s) to auth.privy.io
types: 34 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmr3q4ru000970dl7oiqipnum · script · 39 requests · network recording
E9
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E10
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E11
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E12
localStorage: 3 key(s) saved in your browser
localStorage keys: privy:caid, privy:sent:cmr3q4ru000970dl7oiqipnum:588, privy:connections · values not stored
E13
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB · values not stored
E14
Next.js detected by REA (next-runtime)
confidence: high
covert.market/_next/static/chunks/app/page-532b56967cee5c31.js · “next-runtime” · REA analyze-web-bundle 6.4.0
E15
React detected by REA (react-runtime)
confidence: medium
covert.market/_next/static/chunks/4bd1b696-df4c0fb946159b6a.js · “react-runtime” · REA analyze-web-bundle 6.4.0
The site says: “…Trade Launch Portfolio Docs X COVERT.EXE - CS2 items, on-chain, with leverage File Edit View Trade Launch Help COVERT…”
page text · https://covert.market/ · …Trade Launch Portfolio Docs X COVERT.EXE - CS2 items, on-chain, with leverage File Edit View Trade Launch Help COVERT…
E229
The site says: “…ix Weapon Case $3.39 -- $COVERT MC$28.3K 92% A44U…pump Connect wallet 9:05 PM”
page text · https://covert.market/ · …ix Weapon Case $3.39 -- $COVERT MC$28.3K 92% A44U…pump Connect wallet 9:05 PM
E230
The site says: “…n on pump.fun and ride the curve to PumpSwap. Open the terminal Browse markets How the index works Ready. Index from 5…”
page text · https://covert.market/ · …n on pump.fun and ride the curve to PumpSwap. Open the terminal Browse markets How the index works Ready. Index from 5…
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
REA hit its size budget on parts of 30 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id kroP4yTf.