Website report · 16 h ago

scash.meme

“scash — trade it, then route it”

Template-written 51 evidence items Code reader analysed 1 scripts
What this means for you

scash talked to 1 outside service on a first visit.E6

  • An AI agent used the site and saw 1 of 1 claimed features working.E48E49E50
  • On-chain / smart contracts: “…e proceeds find a coin movers, last 1 h · 22:56:11 UTC contract address load ZEC +0.8%…: The sandbox blocked typing into the contract address box. Clicking the RAY mover called /api/token/<mint>, /candles and /api/quote, then showed Raydium's mint, price, market cap, liquidity, holders and mint/freeze authority status, plus a buy quote. Switching the chart to 1h fetched new candle data.E48E49E50
  • Also noticed, Route builder marks pool and bridge legs as simulated: The /route page splits an amount into legs and ranks ways to send it. Only direct-transfer legs are labelled live. Shielded-pool and bridge legs are labelled simulated, and the page says those legs move nothing.E51
  • Also noticed, Trading needs a wallet: Buying, selling and viewing positions all need a connected wallet, which this sandbox can't do. The page only showed quote figures.E49
  • Tech check: the site claims on-chain / smart contracts, and its public page shows matching evidence.E45E43E44
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E43

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…e proceeds find a coin movers, last 1 h · 22:56:11 UTC contract address load ZEC +0.8% PUMP +0.7% RAY +1.3% JUP +0.6% USELESS…”E45

Wallet requests in its code: signTransaction, signMessageE43E44

Calls its own backend /official.json, /api/status, /api/moversE12E13E14E15
Wallet code PhantomE9E43E44
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

On-chain / smart contracts: “…e proceeds find a coin movers, last 1 h · 22:56:11 UTC contract address load ZEC +0.8%…

The sandbox blocked typing into the contract address box. Clicking the RAY mover called /api/token/<mint>, /candles and /api/quote, then showed Raydium's mint, price, market cap, liquidity, holders and mint/freeze authority status, plus a buy quote. Switching the chart to 1h fetched new candle data.E48E49E50

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Route builder marks pool and bridge legs as simulated

The /route page splits an amount into legs and ranks ways to send it. Only direct-transfer legs are labelled live. Shielded-pool and bridge legs are labelled simulated, and the page says those legs move nothing.E51

Noticed

Trading needs a wallet

Buying, selling and viewing positions all need a connected wallet, which this sandbox can't do. The page only showed quote figures.E49

What it is

  • The Internet Archive has never saved this site, so it is probably new.E46
  • The site describes itself as: “Trade any Solana memecoin, then decide exactly how the proceeds leave: split, timed, shielded and routed, with a straight answer on what sta”E2
  • It's built with React (common tools for building web apps).E8
  • In your browser it saves small bits of data in your browser.E10
  • It has sections such as /shield, /route, /activity, /trade, /r and /t.E42
  • While loading, it called 7 endpoints on its own servers, such as /official.json, /api/status, /api/movers and 4 more.E12E13E14E15

Where your data goes

Not identifiedServices we don't have in our list yet. 1
cdn.scash.qqqqqqqqqqqqqqqqq.xyznot identified 9×E6

Crypto and wallets

  • Wallet tools in the code: Phantom.E9
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E43
  • signMessage: asks a wallet to sign a message.E44

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E43

signTransaction

Connecting your wallet

It connects to crypto wallets using Phantom, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E9

PhantomsignTransactionsignMessage

Loading its content

Its content loads from its own API while you browse (/official.json, /api/status, /api/movers, /api/feed and 2 more).E12E13E14E15E16

/official.json/api/status/api/movers/api/feed/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm/candles

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E11

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10E7

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE7: scash.recent

Pages and API calls

Pages it links to

//shield/route/activity/trade/r/t

Endpoints

Called while loading (seen) or named in the code (code).

scash.meme/official.jsonseenE12
scash.meme/api/statusseenE13
scash.meme/api/moversseenE14
scash.meme/api/feedseenE15
scash.meme/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjmseenE16
scash.meme/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm/candlesseenE17
scash.meme/api/quoteseenE18
/official.jsoncodeE19
/api/txcodeE20
/api/tx/submitcodeE21
/api/tokencodeE22
/api/positionscodeE23
/api/swap/buildcodeE24
/api/shieldcodeE25
/api/shield/viewkeycodeE26
/api/shield/shieldcodeE27
/api/shield/unshieldcodeE28
/api/shield/sendcodeE29
/api/shield/viewkey/revokecodeE30
/api/routecodeE31
/api/tradescodeE32
/api/configcodeE33
/api/route/checkcodeE34
/api/verifycodeE35
/api/mecodeE36
/api/me/disclosurecodeE37
/api/routescodeE38
/api/boardcodeE39
/api/tradecodeE40
/api/disclosecodeE41

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: scash — trade it, then route it
page title · https://scash.meme/
E2
Page description: Trade any Solana memecoin, then decide exactly how the proceeds leave: split, timed, shielded and routed, with a straight answer on what stays public.
page description · https://scash.meme/
E3
Site name: scash
page site_name · https://scash.meme/
E4
Main heading: trade
page h1 · https://scash.meme/
E5
18 request(s) to scash.meme
types: 10 fetch, 5 font, 1 document
GET https://scash.meme/ · fetch · 18 requests · network recording
E6
9 request(s) to cdn.scash.qqqqqqqqqqqqqqqqq.xyz
types: 9 image
GET https://cdn.scash.qqqqqqqqqqqqqqqqq.xyz/9a722516af46d51aa5383f1908dfcd6b.webp · image · 9 requests · network recording
E7
localStorage: 1 key(s) saved in your browser
localStorage keys: scash.recent · values not stored
E8
React detected by the code reader (react-runtime)
confidence: medium
scash.meme/assets/index-BnhevB-L.js · “react-runtime” · the code reader
E9
Phantom found in the code
scash.meme/assets/index-BnhevB-L.js @ 42:17738 · “phantom.app” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
scash.meme/assets/index-BnhevB-L.js @ 42:2149 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: canvas
draws graphics on a canvas
scash.meme/assets/index-BnhevB-L.js @ 42:18695 · “getContext("2d"” · pattern scan
E12
The page called /official.json on scash.meme (GET)
GET https://scash.meme/official.json · fetch · network recording
E13
The page called /api/status on scash.meme (GET)
GET https://scash.meme/api/status · fetch · network recording
E14
The page called /api/movers on scash.meme (GET)
GET https://scash.meme/api/movers · fetch · network recording
E15
The page called /api/feed on scash.meme (GET)
GET https://scash.meme/api/feed · fetch · network recording
E16
The page called /api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm on scash.meme (GET)
GET https://scash.meme/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm · fetch · network recording
E17
The page called /api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm/candles on scash.meme (GET)
GET https://scash.meme/api/token/EKpQGSJtjMFqKZ9KQanSqYXRcF8fBopzLHYxdM65zcjm/candles · fetch · network recording
E18
The page called /api/quote on scash.meme (GET)
GET https://scash.meme/api/quote · fetch · network recording
E19
Code reader found the endpoint /official.json
how: call:fetch
scash.meme/assets/index-BnhevB-L.js @ 42:10871 · “/official.json” · the code reader
E20
The code names the endpoint /api/tx
scash.meme/assets/index-BnhevB-L.js @ 42:35969 · “/api/tx” · pattern scan
E21
The code names the endpoint /api/tx/submit
scash.meme/assets/index-BnhevB-L.js @ 42:36533 · “/api/tx/submit” · pattern scan
E22
The code names the endpoint /api/token
scash.meme/assets/index-BnhevB-L.js @ 42:37073 · “/api/token” · pattern scan
E23
The code names the endpoint /api/positions
scash.meme/assets/index-BnhevB-L.js @ 42:37197 · “/api/positions” · pattern scan
E24
The code names the endpoint /api/swap/build
scash.meme/assets/index-BnhevB-L.js @ 42:45684 · “/api/swap/build” · pattern scan
E25
The code names the endpoint /api/shield
scash.meme/assets/index-BnhevB-L.js @ 42:59492 · “/api/shield” · pattern scan
E26
The code names the endpoint /api/shield/viewkey
scash.meme/assets/index-BnhevB-L.js @ 42:60409 · “/api/shield/viewkey” · pattern scan
E27
The code names the endpoint /api/shield/shield
scash.meme/assets/index-BnhevB-L.js @ 42:60768 · “/api/shield/shield” · pattern scan
E28
The code names the endpoint /api/shield/unshield
scash.meme/assets/index-BnhevB-L.js @ 42:60804 · “/api/shield/unshield” · pattern scan
E29
The code names the endpoint /api/shield/send
scash.meme/assets/index-BnhevB-L.js @ 42:60827 · “/api/shield/send” · pattern scan
E30
The code names the endpoint /api/shield/viewkey/revoke
scash.meme/assets/index-BnhevB-L.js @ 42:70791 · “/api/shield/viewkey/revoke” · pattern scan
E31
The code names the endpoint /api/route
scash.meme/assets/index-BnhevB-L.js @ 42:72240 · “/api/route” · pattern scan
E32
The code names the endpoint /api/trades
scash.meme/assets/index-BnhevB-L.js @ 42:84534 · “/api/trades” · pattern scan
E33
The code names the endpoint /api/config
scash.meme/assets/index-BnhevB-L.js @ 42:84617 · “/api/config” · pattern scan
E34
The code names the endpoint /api/route/check
scash.meme/assets/index-BnhevB-L.js @ 42:86010 · “/api/route/check” · pattern scan
E35
The code names the endpoint /api/verify
scash.meme/assets/index-BnhevB-L.js @ 43:7041 · “/api/verify” · pattern scan
E36
The code names the endpoint /api/me
scash.meme/assets/index-BnhevB-L.js @ 43:11379 · “/api/me” · pattern scan
E37
The code names the endpoint /api/me/disclosure
scash.meme/assets/index-BnhevB-L.js @ 47:35 · “/api/me/disclosure” · pattern scan
E38
The code names the endpoint /api/routes
scash.meme/assets/index-BnhevB-L.js @ 47:1634 · “/api/routes” · pattern scan
E39
The code names the endpoint /api/board
scash.meme/assets/index-BnhevB-L.js @ 47:7864 · “/api/board” · pattern scan
E40
The code names the endpoint /api/trade
scash.meme/assets/index-BnhevB-L.js @ 47:11571 · “/api/trade” · pattern scan
E41
The code names the endpoint /api/disclose
scash.meme/assets/index-BnhevB-L.js @ 47:16180 · “/api/disclose” · pattern scan
E42
23 links to pages on the same site
page links · https://scash.meme/ · /, /shield, /route, /activity, /trade, /r, /t
E43
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
scash.meme/assets/index-BnhevB-L.js @ 42:1095 · “signTransaction” · pattern scan
E44
Wallet request in code: signMessage
asks a wallet to sign a message
scash.meme/assets/index-BnhevB-L.js @ 42:3116 · “signMessage” · pattern scan
E45
The site says: “…e proceeds find a coin movers, last 1 h · 22:56:11 UTC contract address load ZEC +0.8% PUMP +0.7% RAY +1.3% JUP +0.6% USELESS…”
page text · https://scash.meme/ · …e proceeds find a coin movers, last 1 h · 22:56:11 UTC contract address load ZEC +0.8% PUMP +0.7% RAY +1.3% JUP +0.6% USELESS…
E46
The Internet Archive has no saved copy of scash.meme
page web archive · https://web.archive.org/web/*/scash.meme
E47
Agent step 1: view
AI agent step 1 · view on /
E48
Agent step 2: type paste a contract address (CA) (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 2 · type on /
E49
Agent step 3: click RAY +1.3%
AI agent step 3 · click on /trade/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R · page called GET scash.meme/api/token/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R, GET scash.meme/api/token/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R/candles, GET scash.meme/api/quote
E50
Agent step 4: click 1h
AI agent step 4 · click on /trade/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R · page called GET scash.meme/api/token/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R/candles, GET scash.meme/api/status
E51
Agent step 5: go /route
AI agent step 5 · go on /route · page called GET scash.meme/official.json, GET scash.meme/api/status, GET scash.meme/api/config

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id yUM0Gxdy.