trenchcoat
Free · no sign-up
Website report · 1 h ago

ipopad.app

“Initial Pump Offering”

Template-written 36 evidence items Code reader analysed 2 scripts
What this means for you

ipopad.app talked to 2 outside services on a first visit.E6E5

  • An AI agent used the site and saw 2 of 3 claimed features working.E33E32E36E35
  • Wallet connection: Clicking 'Connect wallet' opened a 'connect your wallet' panel that said no Solana wallet was found and suggested Phantom, Solflare or Backpack. The button responds, but actually connecting a wallet is outside what this sandbox can do.E33
  • Live data / analytics: The Analytics page called /api/stats, /api/coins, /api/analytics and /api/config, then showed curve volume ($339, 3.54 SOL), launch and migration counts, a fee breakdown and a top-coins table. The PCAT coin page loaded a chart endpoint and a trade list with each trade linked to Solscan.E32E36
  • A working app / platform: The launch page loaded a full coin-creation form with name, ticker, image, migration market cap, pair and rules fields, and coin pages showed buy/sell trade panels. Creating a coin and placing a trade need a wallet, so those steps were not tested.E35E36
  • Tech check: the site claims wallet connection, live data / analytics and a working app / platform, and its public page shows matching evidence.E27E28E25E26E10
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E25

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“#1$IPOCAT$3.0K #2$IPO$2.9K #3$PCAT$2.7K Launch coin Connect wallet IPO A better way to launch on Pumpfun LAUNCH EXPLORE C…”E27

Wallet requests in its code: signTransaction, signMessageE25E26

Evidence found

Live data / analytics

“…E CA 4PSHNUHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On P…”E28

Calls to its own backend: /api/stats, /api/coins, /api/configE10E11E12

Evidence found

A working app / platform

“…UHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On Pumpfun 3T…”E29

Calls to its own backend: /api/stats, /api/coins, /api/configE10E11E12

Calls its own backend /api/stats, /api/coins, /api/configE10E11E12
Wallet code signTransaction, signMessageE25E26
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

The real tech may live elsewhere. This page links to: github.com/ipopad/ipopad · check the code

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 6 steps and saw 2 of 3 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Wallet connection

Clicking 'Connect wallet' opened a 'connect your wallet' panel that said no Solana wallet was found and suggested Phantom, Solflare or Backpack. The button responds, but actually connecting a wallet is outside what this sandbox can do.E33

Seen working

Live data / analytics

The Analytics page called /api/stats, /api/coins, /api/analytics and /api/config, then showed curve volume ($339, 3.54 SOL), launch and migration counts, a fee breakdown and a top-coins table. The PCAT coin page loaded a chart endpoint and a trade list with each trade linked to Solscan.E32E36

Seen working

A working app / platform

The launch page loaded a full coin-creation form with name, ticker, image, migration market cap, pair and rules fields, and coin pages showed buy/sell trade panels. Creating a coin and placing a trade need a wallet, so those steps were not tested.E35E36

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Small activity scale

The site lists 3 coins in total, 6 traders and about $8.6K combined market cap, and the coins were created about 50 minutes before the visit.E31E32

Noticed

Analytics coin link click timed out

Clicking the PCAT link in the analytics table timed out after 4 seconds. Opening the coin URL directly loaded the page normally.E34E36

What it is

  • The Internet Archive has never saved this site, so it is probably new.E30
  • The site describes itself as: “Initial Pump Offering. Launch a coin on its own curve with your own rules. When it fills, it migrates to Pumpfun and every holder receives t”E2
  • It's built with React (common tools for building web apps).E7
  • In your browser it saves small bits of data in your browser.E8
  • It has sections such as /explore, /analytics, /docs, /launch and /coin.E24
  • While loading, it called 3 endpoints on its own servers, such as /api/stats, /api/coins and /api/config.E10E11E12

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E6
fonts.googleapis.comGoogle Fonts: fonts 1×E5

Crypto and wallets

  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E25
  • signMessage: asks a wallet to sign a message.E26

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E25

signTransaction

Loading its content

Its content loads from its own API while you browse (/api/stats, /api/coins and /api/config).E10E11E12

/api/stats/api/coins/api/config

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E9

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E8

local_storage

Pages and API calls

Pages it links to

//explore/analytics/docs/launch/coin

Endpoints

Called while loading (seen) or named in the code (code).

ipopad.app/api/statsseenE10
ipopad.app/api/coinsseenE11
ipopad.app/api/configseenE12
/api/analyticscodeE13
/api/statuscodeE14
/api/pairscodeE15
/api/tickercodeE16
/api/launch/tickercodeE17
/api/launch/preparecodeE18
/api/launch/submitcodeE19
/api/launch/listcodeE20
/api/launch/list/submitcodeE21
/api/trade/preparecodeE22
/api/trade/submitcodeE23

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Initial Pump Offering
page title · https://ipopad.app/
E2
Page description: Initial Pump Offering. Launch a coin on its own curve with your own rules. When it fills, it migrates to Pumpfun and every holder receives the new coi
page description · https://ipopad.app/
E3
Main heading: IPO
page h1 · https://ipopad.app/
E4
19 request(s) to ipopad.app
types: 11 fetch, 5 image, 1 document
GET https://ipopad.app/ · fetch · 19 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 · font · 3 requests · network recording
E7
React detected by the code reader (react-runtime)
confidence: medium
ipopad.app/assets/index-BbuHQl2R.js · “react-runtime” · the code reader
E8
Uses the browser ability: local_storage
saves small bits of data in your browser
ipopad.app/assets/index-BbuHQl2R.js @ 11:2883 · “localStorage.setItem(” · pattern scan
E9
Uses the browser ability: canvas
draws graphics on a canvas
ipopad.app/assets/index-BbuHQl2R.js @ 13:23843 · “getContext("2d"” · pattern scan
E10
The page called /api/stats on ipopad.app (GET)
GET https://ipopad.app/api/stats · fetch · network recording
E11
The page called /api/coins on ipopad.app (GET)
GET https://ipopad.app/api/coins · fetch · network recording
E12
The page called /api/config on ipopad.app (GET)
GET https://ipopad.app/api/config · fetch · network recording
E13
The code names the endpoint /api/analytics
ipopad.app/assets/index-BbuHQl2R.js @ 11:6970 · “/api/analytics” · pattern scan
E14
The code names the endpoint /api/status
ipopad.app/assets/index-BbuHQl2R.js @ 11:7031 · “/api/status” · pattern scan
E15
The code names the endpoint /api/pairs
ipopad.app/assets/index-BbuHQl2R.js @ 11:7149 · “/api/pairs” · pattern scan
E16
The code names the endpoint /api/ticker
ipopad.app/assets/index-BbuHQl2R.js @ 11:7433 · “/api/ticker” · pattern scan
E17
The code names the endpoint /api/launch/ticker
ipopad.app/assets/index-BbuHQl2R.js @ 11:7528 · “/api/launch/ticker” · pattern scan
E18
The code names the endpoint /api/launch/prepare
ipopad.app/assets/index-BbuHQl2R.js @ 11:7602 · “/api/launch/prepare” · pattern scan
E19
The code names the endpoint /api/launch/submit
ipopad.app/assets/index-BbuHQl2R.js @ 11:7650 · “/api/launch/submit” · pattern scan
E20
The code names the endpoint /api/launch/list
ipopad.app/assets/index-BbuHQl2R.js @ 11:7709 · “/api/launch/list” · pattern scan
E21
The code names the endpoint /api/launch/list/submit
ipopad.app/assets/index-BbuHQl2R.js @ 11:7752 · “/api/launch/list/submit” · pattern scan
E22
The code names the endpoint /api/trade/prepare
ipopad.app/assets/index-BbuHQl2R.js @ 11:7821 · “/api/trade/prepare” · pattern scan
E23
The code names the endpoint /api/trade/submit
ipopad.app/assets/index-BbuHQl2R.js @ 11:7863 · “/api/trade/submit” · pattern scan
E24
9 links to pages on the same site
page links · https://ipopad.app/ · /, /explore, /analytics, /docs, /launch, /coin
E25
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
ipopad.app/assets/index-BbuHQl2R.js @ 11:2711 · “signTransaction” · pattern scan
E26
Wallet request in code: signMessage
asks a wallet to sign a message
ipopad.app/assets/index-BbuHQl2R.js @ 11:5266 · “signMessage” · pattern scan
E27
The site says: “#1$IPOCAT$3.0K #2$IPO$2.9K #3$PCAT$2.7K Launch coin Connect wallet IPO A better way to launch on Pumpfun LAUNCH EXPLORE C…”
page text · https://ipopad.app/ · #1$IPOCAT$3.0K #2$IPO$2.9K #3$PCAT$2.7K Launch coin Connect wallet IPO A better way to launch on Pumpfun LAUNCH EXPLORE C…
E28
The site says: “…E CA 4PSHNUHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On P…”
page text · https://ipopad.app/ · …E CA 4PSHNUHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On P…
E29
The site says: “…UHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On Pumpfun 3T…”
page text · https://ipopad.app/ · …UHXDxAyxLBDCMQvuqyvEZnj3beTZLpRAVnvCipo Copy LIVE DATA Platform Statistics 3Total Coins $8.6KMarket Cap 2On Pumpfun 3T…
E30
The Internet Archive has no saved copy of ipopad.app
page web archive · https://web.archive.org/web/*/ipopad.app
E31
Agent step 1: view
AI agent step 1 · view on /
E32
Agent step 2: click Analytics
AI agent step 2 · click on /analytics · page called GET ipopad.app/api/stats, GET ipopad.app/api/coins, GET ipopad.app/api/analytics, GET ipopad.app/api/config
E33
Agent step 3: click Connect wallet
AI agent step 3 · click on /analytics
E34
Agent step 4: click PCAT Pump Cat (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 4 · click on /analytics
E35
Agent step 5: go /launch
AI agent step 5 · go on /launch · page called GET ipopad.app/api/stats, GET ipopad.app/api/coins, GET ipopad.app/api/config, GET ipopad.app/api/pairs
E36
Agent step 6: go /coin/5AYte3qJK8PKZYyrJNfaXkReST5W7iFDLbgTYrYMkipo
AI agent step 6 · go on /coin/5AYte3qJK8PKZYyrJNfaXkReST5W7iFDLbgTYrYMkipo · page called GET ipopad.app/api/stats, GET ipopad.app/api/coins, GET ipopad.app/api/coins/5AYte3qJK8PKZYyrJNfaXkReST5W7iFDLbgTYrYMkipo/chart, GET ipopad.app/api/coins/5AYte3qJK8PKZYyrJNfaXkReST5W7iFDLbgTYrYMkipo, GET ipopad.app/api/config

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id m8b0zWxJ.