Ceiling talked to 4 outside services on a first visit.E7E9E8E6
An AI agent used the site and saw 2 of 3 claimed features working.E223E224E225E226
On-chain / smart contracts: When I changed the fee example's daily volume to 200,000, it recalculated to $600/day in creator fees (0.3%) split 75/15/10. The ledger lists fee-claim and fee-split 'Lock' transactions for $CCAT with Solscan links. I couldn't see from the page itself that the 0.3% rate is read from an on-chain fee config.E223E224
Wallet connection: Clicking 'Connect wallet' opened a Privy-based 'Select your wallet' window offering Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this test.E225
Trading / swaps / bots: The ledger shows engine transactions with Solscan links (fee claims, buyback transfers, one creator payout), and the status page shows live RPC slot, Jupiter SOL price and engine timestamps. It lists no swaps into paired assets, holder payouts or burns ('No burns yet', 'Last payout round: none yet').E224E226
Tech check: the site claims on-chain / smart contracts, wallet connection and trading / swaps / bots, and its public page shows matching evidence.E218E219E140E141E142
We saw no known analytics or advertising services load on the first visit.E1
3 cookies were set in your browser, 3 of them by other companies' domains.E10E11E12
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, sign structured data (logins, orders or off-chain approvals), send transactions and 2 more. Read every wallet pop-up before approving.E131E138E132E133E137E139
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
On-chain / smart contracts
“…eator fee of 0.3% of its trading volume, read from its on-chain fee config. Here is how that splits. This is an illust…”E218
Contract calls in its code: query, approve, transferFromE140E141E142E143
Blockchains named in its code: Arbitrum One, Arbitrum Sepolia, AvalancheE198E199E200E201
Contract calls in its codequery, approve, transferFromE140E141E142E143
Talks to AI servicesnone seen
Live connectionsnone seen
What the AI agent tried
An AI agent (claude-opus-5-5) used the site in our sandbox for 7 steps and saw 2 of 3 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.
Seen working
On-chain / smart contracts
When I changed the fee example's daily volume to 200,000, it recalculated to $600/day in creator fees (0.3%) split 75/15/10. The ledger lists fee-claim and fee-split 'Lock' transactions for $CCAT with Solscan links. I couldn't see from the page itself that the 0.3% rate is read from an on-chain fee config.E223E224
Couldn't test
Wallet connection
Clicking 'Connect wallet' opened a Privy-based 'Select your wallet' window offering Phantom, Solflare and Backpack. Actually connecting a wallet is blocked in this test.E225
Seen working
Trading / swaps / bots
The ledger shows engine transactions with Solscan links (fee claims, buyback transfers, one creator payout), and the status page shows live RPC slot, Jupiter SOL price and engine timestamps. It lists no swaps into paired assets, holder payouts or burns ('No burns yet', 'Last payout round: none yet').E224E226
Also noticed
Things the agent saw along the way that aren't among the site's claims. Not counted above.
Noticed
Buy quote on coin page
Typing 0.1 SOL into the $CCAT buy box gave an estimate of 962.3K $CCAT (about $9.02), a minimum received amount and the pump.fun fee. Sending the trade requires a connected wallet.E228
Noticed
Payout threshold passed with no round
The $CCAT page shows the next payout round at '0.2155 SOL of 0.1 SOL', so the stated threshold has been passed. The status page still reports no payout round yet.E226E227
What it is
The Internet Archive has never saved this site, so it is probably new.E221
The site describes itself as: “Ceiling is a pump.fun launchpad. Every coin is paired with real assets, tokenized stocks, pre-IPO tokens or leading Solana memecoins, and it”E2
It's built with Next.js and React (common tools for building web apps).E15E16
In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E24E25E26
It has sections such as /launch, /coins, /ledger, /docs, /research and /status.E68E69
Where your data goes
Crypto & walletsConnect wallets, read blockchains or fetch token prices.3
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, web3.js, thirdweb, Phantom and 1 more.E17E18E19E20E21E22
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E131
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E138
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E132
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E133
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E137
signTransaction: asks a wallet to sign transactions (often Solana wallets).E139
Contract functions the app calls by name: query, approve, transferFrom, transfer, getConfigCommitment, updateConfig, decimals, burnKeyAuthorizationWitness and 22 more.E140E141E142E143E144E145
Chains named in the code: Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji, Celo Mainnet, OP Mainnet, Polygon Mainnet, Polygon Amoy and 12 more.E198E199E200E201E202E203
28 contract or wallet addresses are written into the code, including USDC on Ethereum and USDC on Base.E174E180
28 addresses found in the code
0x3085a8003f340cd51c72d9e1a1298cdafb171b020xd43d00981222a8db444a528e69f19e3ce5a7d2ff0x1de6b233984583f4d936ae4265f3b60282b70cc60x0d57c10249eb3a92b7d81bba6221f80f2865448a0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e75820x833589fcd6edb6e08f4c7c32d4f71b54bda02913 · USDC on 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
Paste any of these into the box on the home page to get the contract's report.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, eth_signTypedData, eth_sendTransaction and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E131E138E132E133E137E139
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, web3.js and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E17E18E19E20E21E22
It reads blockchain data (Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji and 4 more) to show balances, prices or contract state.E198E199E200
Sign-in and account features show up in its code or traffic (/api/v1/custom_jwt_account/authenticate, /api/v1/custom_jwt_account/link, /api/v1/farcaster/authenticate and /api/v2/farcaster/authenticate).E39E40E42
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: Ceiling
page title · https://ceilingdotfun.xyz/
E2
Page description: Ceiling is a pump.fun launchpad. Every coin is paired with real assets, tokenized stocks, pre-IPO tokens or leading Solana memecoins, and its creator
page description · https://ceilingdotfun.xyz/
E3
Site name: Ceiling
page site_name · https://ceilingdotfun.xyz/
E4
Main heading: Every coin pays its holders
in real assets.
page h1 · https://ceilingdotfun.xyz/
E5
95 request(s) to ceilingdotfun.xyz
types: 41 script, 37 image, 8 fetch
GET https://ceilingdotfun.xyz/ · script · 95 requests · network recording
E6
1 request(s) to 7omttwdqcw2hkmj6.public.blob.vercel-storage.com
types: 1 image
GET https://7omttwdqcw2hkmj6.public.blob.vercel-storage.com/ceiling/mainnet/images/df23adca14b707da0372fe0bac70dbd2a655b1a979a761363b758c1be76719ea.… · image · network recording
E7
4 request(s) to coin-images.coingecko.com
types: 4 image
GET https://coin-images.coingecko.com/coins/images/28600/large/bonk.jpg · image · 4 requests · network recording
E8
5 request(s) to explorer-api.walletconnect.com
types: 3 image, 2 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · image · 5 requests · network recording
E9
42 request(s) to auth.privy.io
types: 37 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmw40drmp00ok0hjmw5sexlbl · script · 42 requests · network recording
E10
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E11
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E12
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E13
localStorage: 3 key(s) saved in your browser
localStorage keys: privy:caid, privy:sent:cmw40drmp00ok0hjmw5sexlbl:588, privy:connections · values not stored
E14
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB · values not stored
E15
Next.js detected by the code reader (next-runtime)
confidence: high
ceilingdotfun.xyz/ · “next-runtime” · the code reader
E16
React detected by the code reader (react-runtime)
confidence: medium
ceilingdotfun.xyz/_next/static/immutable/chunks/04ib8dc7pwpw-.js · “react-runtime” · the code reader
The site says: “…eator fee of 0.3% of its trading volume, read from its on-chain fee config. Here is how that splits. This is an illust…”
page text · https://ceilingdotfun.xyz/ · …eator fee of 0.3% of its trading volume, read from its on-chain fee config. Here is how that splits. This is an illust…
E219
The site says: “…Resources Company 中文 SearchCtrl K $CEILINGComing soon Connect wallet Product LaunchCreate a pump.fun coin paired with real…”
page text · https://ceilingdotfun.xyz/ · …Resources Company 中文 SearchCtrl K $CEILINGComing soon Connect wallet Product LaunchCreate a pump.fun coin paired with real…
E220
The site says: “…e, indexer and price feeds, checked live LedgerClaims, swaps, payouts and burns with Solscan links Company AboutWha…”
page text · https://ceilingdotfun.xyz/ · …e, indexer and price feeds, checked live LedgerClaims, swaps, payouts and burns with Solscan links Company AboutWha…
E221
The Internet Archive has no saved copy of ceilingdotfun.xyz
page web archive · https://web.archive.org/web/*/ceilingdotfun.xyz
E222
Agent step 1: view
AI agent step 1 · view on /
E223
Agent step 2: type 1,000,000 ← “200000”
AI agent step 2 · type on /
E224
Agent step 3: go /ledger
AI agent step 3 · go on /ledger · page called GET ceilingdotfun.xyz/, GET ceilingdotfun.xyz/token/3KCPFF2ZVtGTKkVRFn6hxLLTvYhaBoARyiVqrCiku3XW, GET ceilingdotfun.xyz/ledger, GET explorer-api.walletconnect.com/v3/wallets, GET auth.privy.io/api/v1/apps/cmw40drmp00ok0hjmw5sexlbl
E225
Agent step 4: click Connect wallet
AI agent step 4 · click on /ledger
E226
Agent step 5: go /status
AI agent step 5 · go on /status · page called GET ceilingdotfun.xyz/, GET ceilingdotfun.xyz/launch, GET ceilingdotfun.xyz/coins, GET ceilingdotfun.xyz/ledger, GET ceilingdotfun.xyz/docs, GET ceilingdotfun.xyz/research, GET ceilingdotfun.xyz/terms, GET ceilingdotfun.xyz/privacy, GET explorer-api.walletconnect.com/v3/wallets, GET auth.privy.io/ap
E227
Agent step 6: go /token/3KCPFF2ZVtGTKkVRFn6hxLLTvYhaBoARyiVqrCiku3XW
AI agent step 6 · go on /token/3KCPFF2ZVtGTKkVRFn6hxLLTvYhaBoARyiVqrCiku3XW · page called GET ceilingdotfun.xyz/, GET explorer-api.walletconnect.com/v3/wallets, GET auth.privy.io/api/v1/apps/cmw40drmp00ok0hjmw5sexlbl
E228
Agent step 7: type Amount in SOL ← “0.1”
AI agent step 7 · type on /token/3KCPFF2ZVtGTKkVRFn6hxLLTvYhaBoARyiVqrCiku3XW
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
The code reader hit its size budget on parts of 50 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id nfUgSXRu.
Paste a coin address, a ticker, a wallet or an X post. The scan takes seconds, it's free, and there's no sign-up.
Every coin gets a green, yellow or red light with a score out of 100. Every point links to its source.
Is the tech real?90
Is the dev legit?40
Fair launch?20
2 of 4 · How to read a coin
Three questions, then the money
Tech, dev, launch: each has its own score and its top reasons, and the weakest one sets the light.
Who's behind it: the dev's linked wallets, crews that buy launches together, and who paid for the launch block.
Money taken out: what the dev and the launch-block wallets sold or pulled in the first 24 hours.
X@trenchinspector + CATelegram/s CADiscord/check CA
3 of 4 · Use it where you trade
Ask from X, Telegram or Discord
X: tag @trenchinspector with a coin address and it replies with the light and why.
Telegram and Discord: add the bot to your group and send a coin address.
Pulse: new launches appear about a second after they go live, and each one gets a light once it's scanned.
$COIN · dev sold 4.2%liquidity −40% in 10 min
4 of 4 · Stay on it
Track coins and wallets
Press Track on any coin or wallet. You'll get a browser notification when the dev sells, liquidity is pulled, the price moves hard, or a tracked wallet trades.
No account needed. Tracking is tied to this browser. See it all under Tracking.