trenchcoat
Free · no sign-up
Website report · 23 min ago

uppin.fun

“UPPIN — Spot and Upside from the first trade”

Template-written 51 evidence items Code reader analysed 31 scripts
What this means for you

UPPIN talked to 6 outside services on a first visit, including 2 that measure visits or show ads.E8E9

  • An AI agent used the site and saw 1 of 3 claimed features working.E49E47E46E50
  • Wallet connection: I clicked Connect wallet and a dialog opened saying no Solana wallet was found and listing Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this sandbox.E49
  • Staking / yield: The Earn page loaded pool data from /api/earn: 0 total staked, 5,000 UPPIN cooling down, a 2% service fee and vault addresses. The allocations list was empty ("--"). Staking and claiming require a connected wallet.E47
  • A working app / platform: The Markets page loaded three launched coins with market caps from /api/markets. One coin's market page showed a live chart, 17 trades with Solscan links, and a buy quote (~2.33M UPCAT for 0.1 SOL). Placing a trade needs a wallet.E46E50
  • Tech check: the site claims wallet connection and a working app / platform, and its public page shows matching evidence.E41E43E21E22E23
  • Tech check: the site mentions staking / yield, but we found nothing behind it in what its public page loads.E42
  • Before you click anything, the page loads analytics or ad services: Google Ads / DoubleClick.E8E9
  • 5 cookies were set in your browser, 5 of them by other companies' domains.E12E13E14E15E16
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E39

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“Skip to the desk UPPIN App Connect wallet Every launch opens an upside market. Hold the coin on…”E41

Wallet libraries in its code: WalletConnect / Reown, Solana web3 / wallet adapter, PhantomE21E22E23

Wallet requests in its code: signTransaction, signMessageE39E40

Nothing found on the public page

Staking / yield

“…nly a confirmed deposit becomes a lot buyers can take. Stake UPPIN, claim USDC. Stakers claim USDC each epoch from…”E42

No matching code, calls or services in what loaded for us.

Evidence found

A working app / platform

“…DC. Stakers claim USDC each epoch from option and spot platform fees, active traders get part of their fees back, and…”E43

Calls to its own backend: /api/markets, /api/rpc, /api/config/publicE28E29E30

Wallet code: WalletConnect / Reown, Solana web3 / wallet adapter, PhantomE21E22E23

Live connections: keeps a live two-way connection open to a serverE26

Calls its own backend /api/markets, /api/rpc, /api/config/publicE28E29E30
Wallet code WalletConnect / Reown, Solana web3 / wallet adapter, PhantomE21E22E23E39
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE26

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 7 steps and saw 1 of 3 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

Wallet connection

I clicked Connect wallet and a dialog opened saying no Solana wallet was found and listing Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this sandbox.E49

Couldn't test

Staking / yield

The Earn page loaded pool data from /api/earn: 0 total staked, 5,000 UPPIN cooling down, a 2% service fee and vault addresses. The allocations list was empty ("--"). Staking and claiming require a connected wallet.E47

Seen working

A working app / platform

The Markets page loaded three launched coins with market caps from /api/markets. One coin's market page showed a live chart, 17 trades with Solscan links, and a buy quote (~2.33M UPCAT for 0.1 SOL). Placing a trade needs a wallet.E46E50

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Receipts page lists buyback and burn transactions

The Receipts page showed 50 recent entries, all buyback buys and burns of $UPPIN, each with a Solscan transaction link. None were staker allocations.E51

What it is

  • The Internet Archive has never saved this site, so it is probably new.E44
  • The site describes itself as: “Every new Solana coin opens with Spot and Upside: calls backed by tokens locked in the vault, from the first trade.”E2
  • It's built with React and Next.js (common tools for building web apps).E17E18
  • Notable building blocks in its code: Three.js (3D graphics).E19
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and keeps a live two-way connection open to a server.E24E25E26
  • It has sections such as /markets, /launch, /positions, /earn, /receipts and /docs.E38
  • While loading, it called 3 endpoints on its own servers, such as /api/markets, /api/rpc and /api/config/public.E28E29E30

Where your data goes

AdvertisingShow ads and follow you across sites to target them. 2
googleads.g.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 2×E8
static.doubleclick.netGoogle Ads / DoubleClick: Google's ad network (serving and measuring ads) 1×E9
Social & embedsEmbedded videos, posts and share buttons. 1
www.youtube.comYouTube: embedded videos 15×E6
Backend & data servicesDatabases, search and APIs the app runs on. 1
jnn-pa.googleapis.comGoogle APIs: Google services 1×E11
FontsDownload typefaces. 1
fonts.gstatic.comGoogle Fonts: fonts 1×E7
Not identifiedServices we don't have in our list yet. 1
www.google.comnot identified 1×E10

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown, Solana web3 / wallet adapter and Phantom.E21E22E23
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E39
  • signMessage: asks a wallet to sign a message.E40

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E39

signTransaction

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Solana web3 / wallet adapter, Phantom, signTransaction and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E21E22E23

WalletConnect / ReownSolana web3 / wallet adapterPhantomsignTransactionsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/session, /api/auth/nonce, /api/auth/verify and /api/auth/logout).E34E35E36E20

/api/auth/session/api/auth/nonce/api/auth/verify/api/auth/logout

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E26

websocket

Loading its content

Its content loads from its own API while you browse (/api/markets, /api/rpc and /api/config/public).E28E29E30

/api/markets/api/rpc/api/config/public

Drawing and editing in the browser

The page draws and edits graphics in your browser using Three.js (3D graphics) and the canvas.E19E27

Three.js (3D graphics)canvas

How ads get picked

Ads are chosen through ad networks and exchanges (Google Ads / DoubleClick); they receive details about your visit to bid on the ad space.E8E9

Google Ads / DoubleClick

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
YSCE12youtube.com until you close the browserother company
VISITOR_INFO1_LIVEE13youtube.com about 180 daysother company
VISITOR_PRIVACY_METADATAE14youtube.com about 180 daysother company
__Secure-YNIDE15youtube.com about 180 daysother company
__Secure-ROLLOUT_TOKENE16youtube.com about 180 daysother company

Pages and API calls

Pages it links to

//markets/launch/positions/earn/receipts/docs

Endpoints

Called while loading (seen) or named in the code (code).

uppin.fun/api/marketsseenE28
uppin.fun/api/rpcseenE29
uppin.fun/api/config/publicseenE30
/api/rpccodeE31
/api/marketscodeE32
/api/config/publiccodeE33
/api/auth/sessioncodeE34
/api/auth/noncecodeE35
/api/auth/verifycodeE36
/api/auth/logoutcodeE37

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: UPPIN — Spot and Upside from the first trade
page title · https://uppin.fun/
E2
Page description: Every new Solana coin opens with Spot and Upside: calls backed by tokens locked in the vault, from the first trade.
page description · https://uppin.fun/
E3
Site name: UPPIN
page site_name · https://uppin.fun/
E4
Main heading: Every launch opens an upside market.
page h1 · https://uppin.fun/
E5
25 request(s) to uppin.fun
types: 15 script, 3 font, 3 stylesheet
GET https://uppin.fun/ · script · 25 requests · network recording
E6
15 request(s) to www.youtube.com
types: 6 script, 3 fetch, 2 stylesheet
GET https://www.youtube.com/iframe_api · script · 15 requests · network recording
E7
1 request(s) to fonts.gstatic.com
types: 1 font
GET https://fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 · font · network recording
E8
2 request(s) to googleads.g.doubleclick.net
types: 2 xhr
GET https://googleads.g.doubleclick.net/pagead/id · xhr · 2 requests · network recording
E9
1 request(s) to static.doubleclick.net
types: 1 script
GET https://static.doubleclick.net/instream/ad_status.js · script · network recording
E10
1 request(s) to www.google.com
types: 1 script
GET https://www.google.com/js/th/n_BHgtbTP3l_ff810bu_K6lL5wb_ZK3aoRJMIVk8Tks.js · script · network recording
E11
1 request(s) to jnn-pa.googleapis.com
types: 1 xhr
GET https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT · xhr · network recording
E12
Cookie 'YSC' set for youtube.com
session cookie
cookie YSC on youtube.com · value not stored
E13
Cookie 'VISITOR_INFO1_LIVE' set for youtube.com
kept for about 180 days
cookie VISITOR_INFO1_LIVE on youtube.com · value not stored
E14
Cookie 'VISITOR_PRIVACY_METADATA' set for youtube.com
kept for about 180 days
cookie VISITOR_PRIVACY_METADATA on youtube.com · value not stored
E15
Cookie '__Secure-YNID' set for youtube.com
kept for about 180 days
cookie __Secure-YNID on youtube.com · value not stored
E16
Cookie '__Secure-ROLLOUT_TOKEN' set for youtube.com
kept for about 180 days
cookie __Secure-ROLLOUT_TOKEN on youtube.com · value not stored
E17
React detected by the code reader (react-runtime)
confidence: medium
uppin.fun/_next/static/chunks/02gbwqygkqk2p.js · “react-runtime” · the code reader
E18
Next.js detected by the code reader (next-runtime)
confidence: high
uppin.fun/ · “next-runtime” · the code reader
E19
Three.js (3D graphics) found in the code
uppin.fun/_next/static/chunks/41y0cnre_cbpd.js @ 36:338262 · “WebGLRenderer” · pattern scan
E20
NextAuth / Auth.js found in the code
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:11560 · “/api/auth/session” · pattern scan
E21
WalletConnect / Reown found in the code
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:17932 · “WalletConnect” · pattern scan
E22
Solana web3 / wallet adapter found in the code
uppin.fun/_next/static/chunks/0505a9tjm96c8.js @ 7:20 · “wallet-adapter” · pattern scan
E23
Phantom found in the code
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:290 · “phantom.app” · pattern scan
E24
Uses the browser ability: clipboard_write
can copy text to your clipboard
uppin.fun/_next/static/chunks/2-ilqwbnb08ev.js @ 1:10787 · “clipboard.writeText(” · pattern scan
E25
Uses the browser ability: local_storage
saves small bits of data in your browser
uppin.fun/_next/static/chunks/0aj6k8s-9rirj.js @ 1:2295 · “localStorage.setItem(” · pattern scan
E26
Uses the browser ability: websocket
keeps a live two-way connection open to a server
uppin.fun/_next/static/chunks/0505a9tjm96c8.js @ 6:7607 · “new WebSocket(” · pattern scan
E27
Uses the browser ability: canvas
draws graphics on a canvas
uppin.fun/_next/static/chunks/2-ilqwbnb08ev.js @ 1:3474 · “getContext("webgl2"” · pattern scan
E28
The page called /api/markets on uppin.fun (GET)
GET https://uppin.fun/api/markets · fetch · network recording
E29
The page called /api/rpc on uppin.fun (POST)
POST https://uppin.fun/api/rpc · fetch · network recording
E30
The page called /api/config/public on uppin.fun (GET)
GET https://uppin.fun/api/config/public · fetch · network recording
E31
Code reader found the endpoint /api/rpc
how: call:fetch
uppin.fun/_next/static/chunks/0-u7v0i_1biyj.js @ 1:19489 · “/api/rpc” · the code reader
E32
Code reader found the endpoint /api/markets
how: call:fetch
uppin.fun/_next/static/chunks/0-u7v0i_1biyj.js @ 1:21121 · “/api/markets” · the code reader
E33
Code reader found the endpoint /api/config/public
how: call:fetch
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:17132 · “/api/config/public” · the code reader
E34
The code names the endpoint /api/auth/session
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:11560 · “/api/auth/session” · pattern scan
E35
The code names the endpoint /api/auth/nonce
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:12034 · “/api/auth/nonce” · pattern scan
E36
The code names the endpoint /api/auth/verify
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:12169 · “/api/auth/verify” · pattern scan
E37
The code names the endpoint /api/auth/logout
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:12411 · “/api/auth/logout” · pattern scan
E38
7 links to pages on the same site
page links · https://uppin.fun/ · /, /markets, /launch, /positions, /earn, /receipts, /docs
E39
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:13596 · “signTransaction” · pattern scan
E40
Wallet request in code: signMessage
asks a wallet to sign a message
uppin.fun/_next/static/chunks/1cw0g45ph-vel.js @ 1:11769 · “signMessage” · pattern scan
E41
The site says: “Skip to the desk UPPIN App Connect wallet Every launch opens an upside market. Hold the coin on…”
page text · https://uppin.fun/ · Skip to the desk UPPIN App Connect wallet Every launch opens an upside market. Hold the coin on…
E42
The site says: “…nly a confirmed deposit becomes a lot buyers can take. Stake UPPIN, claim USDC. Stakers claim USDC each epoch from…”
page text · https://uppin.fun/ · …nly a confirmed deposit becomes a lot buyers can take. Stake UPPIN, claim USDC. Stakers claim USDC each epoch from…
E43
The site says: “…DC. Stakers claim USDC each epoch from option and spot platform fees, active traders get part of their fees back, and…”
page text · https://uppin.fun/ · …DC. Stakers claim USDC each epoch from option and spot platform fees, active traders get part of their fees back, and…
E44
The Internet Archive has no saved copy of uppin.fun
page web archive · https://web.archive.org/web/*/uppin.fun
E45
Agent step 1: view
AI agent step 1 · view on /
E46
Agent step 2: go /markets
AI agent step 2 · go on /markets · page called POST www.youtube.com/youtubei/v1/log_event, POST www.youtube.com/api/stats/qoe, GET uppin.fun/api/config/public, GET uppin.fun/api/markets, POST uppin.fun/api/rpc, GET googleads.g.doubleclick.net/pagead/id, GET www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg, POST jnn-pa.googlea
E47
Agent step 3: go /earn
AI agent step 3 · go on /earn · page called POST www.youtube.com/youtubei/v1/log_event, POST www.youtube.com/api/stats/atr, GET uppin.fun/api/config/public, GET uppin.fun/api/earn, POST uppin.fun/api/rpc, GET googleads.g.doubleclick.net/pagead/id, POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
E48
Agent step 4: click Positions
AI agent step 4 · click on /positions · page called POST www.youtube.com/youtubei/v1/log_event, POST www.youtube.com/api/stats/atr, GET uppin.fun/api/config/public, GET uppin.fun/api/markets, POST uppin.fun/api/rpc, GET googleads.g.doubleclick.net/pagead/id, POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
E49
Agent step 5: click Connect wallet
AI agent step 5 · click on /positions · page called GET uppin.fun/api/config/public
E50
Agent step 6: go /markets/CcKfn9WXn5yBVbXAk6Wzhix8aHtf4nNfxdAJa6qqCenT
AI agent step 6 · go on /markets/CcKfn9WXn5yBVbXAk6Wzhix8aHtf4nNfxdAJa6qqCenT · page called POST www.youtube.com/youtubei/v1/log_event, POST www.youtube.com/api/stats/atr, GET uppin.fun/api/config/public, GET uppin.fun/api/markets, POST uppin.fun/api/rpc, GET uppin.fun/api/markets/CcKfn9WXn5yBVbXAk6Wzhix8aHtf4nNfxdAJa6qqCenT, GET uppin.fun/api/markets/CcKfn9WXn5yBVbXAk6Wzhix8aHtf4nNfxdAJa6
E51
Agent step 7: go /receipts
AI agent step 7 · go on /receipts · page called POST www.youtube.com/youtubei/v1/log_event, POST www.youtube.com/api/stats/atr, GET uppin.fun/api/config/public, GET googleads.g.doubleclick.net/pagead/id, POST jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 12 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id nPEbrtz0.