Website report · 4 h ago

surplus.codes

“Surplus · US100”

Template-written 54 evidence items Code reader analysed 16 scripts
What this means for you

Surplus only talked to its own servers while we watched.E1

  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E53

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /v1/constituents, /sound/hover-0.wav, /sound/hover-1.wavE14E15E16E17
Wallet code PhantomE9E53
Contract calls in its code none seen
Talks to AI services none seen
Live connections receives a live stream of updates from a serverE12

What it is

  • The Internet Archive has never saved this site, so it is probably new.E54
  • The site describes itself as: “America's largest companies in one token on Solana, with every stock inside placed wherever it earns more than holding it.”E2
  • It's built with Next.js and React (common tools for building web apps).E7E8
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and receives a live stream of updates from a server.E10E11E12
  • It has sections such as /fund, /twins, /buy, /redeem, /account and /strikes.E52
  • While loading, it called 11 endpoints on its own servers, such as /v1/constituents, /sound/hover-0.wav, /sound/hover-1.wav and 8 more.E14E15E16E17

Where your data goes

On a first visit the page only talked to its own servers (surplus.codes, api.surplus.codes).

Crypto and wallets

  • Wallet tools in the code: Phantom.E9
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E53

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E53

signTransaction

Connecting your wallet

It connects to crypto wallets using Phantom and signTransaction. Connecting shows the site your wallet address; it doesn't move funds by itself.E9

PhantomsignTransaction

Live updates

It keeps live connections open (server-sent events) so content updates without reloading.E12

event_source

Loading its content

Its content loads from its own API while you browse (/v1/constituents, /sound/hover-0.wav, /sound/hover-1.wav, /sound/hover-2.wav and 2 more).E14E15E16E17E18

/v1/constituents/sound/hover-0.wav/sound/hover-1.wav/sound/hover-2.wav/sound/hover-3.wav/sound/hover-4.wav

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E13

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E11

local_storage

Pages and API calls

Pages it links to

//fund/twins/buy/redeem/account/strikes/docs/token

Endpoints

Called while loading (seen) or named in the code (code).

api.surplus.codes/v1/constituentsseenE14
surplus.codes/sound/hover-0.wavseenE15
surplus.codes/sound/hover-1.wavseenE16
surplus.codes/sound/hover-2.wavseenE17
surplus.codes/sound/hover-3.wavseenE18
surplus.codes/sound/hover-4.wavseenE19
surplus.codes/sound/select-0.wavseenE20
surplus.codes/sound/select-1.wavseenE21
surplus.codes/sound/select-2.wavseenE22
surplus.codes/sound/select-3.wavseenE23
api.surplus.codes/v1/fundseenE24
/metadata/us100.jsoncodeE25
/v1/allocator/candidatescodeE26
/v1/harvestscodeE27
/v1/basketcodeE28
/v1/basket/updatescodeE29
/v1/basket/queue/buildcodeE30
/healthcodeE31
/v1/fundcodeE32
/v1/constituentscodeE33
/v1/sleevescodeE34
/v1/buycodeE35
/v1/redeemcodeE36
/v1/strikescodeE37
/v1/docscodeE38
/v1/tokencodeE39
/v1/twinscodeE40
/v1/twins/quotecodeE41
/v1/orders/buy/buildcodeE42
/v1/orders/redeem/buildcodeE43

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Surplus · US100
page title · https://surplus.codes/
E2
Page description: America's largest companies in one token on Solana, with every stock inside placed wherever it earns more than holding it.
page description · https://surplus.codes/
E3
Site name: Surplus
page site_name · https://surplus.codes/
E4
Main heading: Surplus: America’s largest companies in one token on Solana
page h1 · https://surplus.codes/
E5
44 request(s) to surplus.codes
types: 25 fetch, 12 script, 3 font
GET https://surplus.codes/ · fetch · 44 requests · network recording
E6
4 request(s) to api.surplus.codes
types: 3 fetch, 1 eventsource
GET https://api.surplus.codes/v1/constituents · fetch · 4 requests · network recording
E7
Next.js detected by the code reader (next-runtime)
confidence: high
surplus.codes/_next/static/chunks/turbopack-077hmtqrhcoji.js · “next-runtime” · the code reader
E8
React detected by the code reader (react-runtime)
confidence: medium
surplus.codes/_next/static/chunks/0c1ad7rcpjghx.js · “react-runtime” · the code reader
E9
Phantom found in the code
surplus.codes/_next/static/chunks/24--rrgbhizgl.js @ 11:857 · “phantom.app” · pattern scan
E10
Uses the browser ability: clipboard_write
can copy text to your clipboard
surplus.codes/_next/static/chunks/35ck5iuthrbnc.js @ 1:2566 · “clipboard.writeText(” · pattern scan
E11
Uses the browser ability: local_storage
saves small bits of data in your browser
surplus.codes/_next/static/chunks/35ck5iuthrbnc.js @ 1:9134 · “localStorage.setItem(” · pattern scan
E12
Uses the browser ability: event_source
receives a live stream of updates from a server
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:65503 · “new EventSource(” · pattern scan
E13
Uses the browser ability: canvas
draws graphics on a canvas
surplus.codes/_next/static/chunks/24--rrgbhizgl.js @ 1:23192 · “getContext("2d"” · pattern scan
E14
The page called /v1/constituents on api.surplus.codes (GET)
GET https://api.surplus.codes/v1/constituents · fetch · network recording
E15
The page called /sound/hover-0.wav on surplus.codes (GET)
GET https://surplus.codes/sound/hover-0.wav · fetch · network recording
E16
The page called /sound/hover-1.wav on surplus.codes (GET)
GET https://surplus.codes/sound/hover-1.wav · fetch · network recording
E17
The page called /sound/hover-2.wav on surplus.codes (GET)
GET https://surplus.codes/sound/hover-2.wav · fetch · network recording
E18
The page called /sound/hover-3.wav on surplus.codes (GET)
GET https://surplus.codes/sound/hover-3.wav · fetch · network recording
E19
The page called /sound/hover-4.wav on surplus.codes (GET)
GET https://surplus.codes/sound/hover-4.wav · fetch · network recording
E20
The page called /sound/select-0.wav on surplus.codes (GET)
GET https://surplus.codes/sound/select-0.wav · fetch · network recording
E21
The page called /sound/select-1.wav on surplus.codes (GET)
GET https://surplus.codes/sound/select-1.wav · fetch · network recording
E22
The page called /sound/select-2.wav on surplus.codes (GET)
GET https://surplus.codes/sound/select-2.wav · fetch · network recording
E23
The page called /sound/select-3.wav on surplus.codes (GET)
GET https://surplus.codes/sound/select-3.wav · fetch · network recording
E24
The page called /v1/fund on api.surplus.codes (GET)
GET https://api.surplus.codes/v1/fund · fetch · network recording
E25
Code reader found the endpoint /metadata/us100.json
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61301 · “/metadata/us100.json” · the code reader
E26
Code reader found the endpoint /v1/allocator/candidates
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61359 · “/v1/allocator/candidates” · the code reader
E27
Code reader found the endpoint /v1/harvests
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61505 · “/v1/harvests” · the code reader
E28
Code reader found the endpoint /v1/basket
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61628 · “/v1/basket” · the code reader
E29
Code reader found the endpoint /v1/basket/updates
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61670 · “/v1/basket/updates” · the code reader
E30
Code reader found the endpoint /v1/basket/queue/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61727 · “/v1/basket/queue/build” · the code reader
E31
Code reader found the endpoint /health
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61777 · “/health” · the code reader
E32
Code reader found the endpoint /v1/fund
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61807 · “/v1/fund” · the code reader
E33
Code reader found the endpoint /v1/constituents
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61846 · “/v1/constituents” · the code reader
E34
Code reader found the endpoint /v1/sleeves
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:61953 · “/v1/sleeves” · the code reader
E35
Code reader found the endpoint /v1/buy
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62054 · “/v1/buy” · the code reader
E36
Code reader found the endpoint /v1/redeem
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62106 · “/v1/redeem” · the code reader
E37
Code reader found the endpoint /v1/strikes
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62212 · “/v1/strikes” · the code reader
E38
Code reader found the endpoint /v1/docs
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62307 · “/v1/docs” · the code reader
E39
Code reader found the endpoint /v1/token
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62381 · “/v1/token” · the code reader
E40
Code reader found the endpoint /v1/twins
how: call:n.get
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62421 · “/v1/twins” · the code reader
E41
Code reader found the endpoint /v1/twins/quote
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62475 · “/v1/twins/quote” · the code reader
E42
Code reader found the endpoint /v1/orders/buy/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62524 · “/v1/orders/buy/build” · the code reader
E43
Code reader found the endpoint /v1/orders/redeem/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:62581 · “/v1/orders/redeem/build” · the code reader
E44
Code reader found the endpoint /v1/in-kind/redeem/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63107 · “/v1/in-kind/redeem/build” · the code reader
E45
Code reader found the endpoint /v1/in-kind/create/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63174 · “/v1/in-kind/create/build” · the code reader
E46
Code reader found the endpoint /v1/twins/swap/build
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63290 · “/v1/twins/swap/build” · the code reader
E47
Code reader found the endpoint /v1/transactions/submit
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63428 · “/v1/transactions/submit” · the code reader
E48
Code reader found the endpoint /v1/operator/strike
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63549 · “/v1/operator/strike” · the code reader
E49
Code reader found the endpoint /v1/operator/faucet
how: call:n.post
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63608 · “/v1/operator/faucet” · the code reader
E50
Code reader found the endpoint /api/dev-wallet
how: call:fetch
surplus.codes/_next/static/chunks/24--rrgbhizgl.js @ 1:37986 · “/api/dev-wallet” · the code reader
E51
The code names the endpoint /v1/events
surplus.codes/_next/static/chunks/0xhpcjjsvooz0.js @ 55:63677 · “/v1/events” · pattern scan
E52
9 links to pages on the same site
page links · https://surplus.codes/ · /, /fund, /twins, /buy, /redeem, /account, /strikes, /docs, /token
E53
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
surplus.codes/_next/static/chunks/24--rrgbhizgl.js @ 11:1664 · “signTransaction” · pattern scan
E54
The Internet Archive has no saved copy of surplus.codes
page web archive · https://web.archive.org/web/*/surplus.codes

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 6 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id xsjxgwq2.