trenchcoat
Free · no sign-up
Website report · 49 min ago

www.shortpad.space

“Short Pad | Short any pump.fun coin”

Template-written 41 evidence items Code reader analysed 28 scripts
What this means for you

Short Pad talked to 2 outside services on a first visit.E6E7

  • An AI agent used the site and saw 1 of 1 claimed features working.E34E37E38E39E40
  • On-chain / smart contracts: On /list-token I entered the Fartcoin pump.fun mint and clicked Look up. The page called /api/token and showed "Fartcoin · graduated" with a SOL price and market cap. When I entered the USDC mint, it showed "That mint is not a pump.fun coin. Only pump.fun coins can be listed here." The mint check responds, but I could only see the site's own API call, so I can't confirm the check reads the chain dE34E37E38E39E40
  • Also noticed, Trade desk loads live market data: Opening /trade called /api/markets, /api/pairs and /api/price. It listed 102 memecoins and 2 listed coins with market caps and 24h changes, plus a mark price and liquidity figure for PENGU. Opening a short needs a connected wallet.E41
  • Tech check: the site claims on-chain / smart contracts, and its public page shows matching evidence.E31E29E30
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E29

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

On-chain / smart contracts

“…urve or has graduated to PumpSwap. The mint is checked on chain before the listing goes live. What does listing cost?…”E31

Wallet requests in its code: signTransaction, signMessageE29E30

Calls its own backend none seen
Wallet code signTransaction, signMessageE29E30
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 9 steps and saw 1 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

On-chain / smart contracts

On /list-token I entered the Fartcoin pump.fun mint and clicked Look up. The page called /api/token and showed "Fartcoin · graduated" with a SOL price and market cap. When I entered the USDC mint, it showed "That mint is not a pump.fun coin. Only pump.fun coins can be listed here." The mint check responds, but I could only see the site's own API call, so I can't confirm the check reads the chain dE34E37E38E39E40

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Trade desk loads live market data

Opening /trade called /api/markets, /api/pairs and /api/price. It listed 102 memecoins and 2 listed coins with market caps and 24h changes, plus a mark price and liquidity figure for PENGU. Opening a short needs a connected wallet.E41

What it is

  • The Internet Archive has never saved this site, so it is probably new.E32
  • The site describes itself as: “List any pump.fun coin with its own pool and short it with up to 2x, settled in SOL. Short Pad is short only: you win when the chart goes do”E2
  • It's built with Next.js and React (common tools for building web apps).E8E9
  • In your browser it saves small bits of data in your browser.E10
  • It has sections such as /list-token, /trade and /portfolio.E28

Where your data goes

FontsDownload typefaces. 2
fonts.googleapis.comGoogle Fonts: fonts 1×E6
fonts.gstatic.comGoogle Fonts: fonts 1×E7

Crypto and wallets

  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E29
  • signMessage: asks a wallet to sign a message.E30

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E29

signTransaction

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/session and /api/user).E17E20

/api/session/api/user

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10

local_storage

Pages and API calls

Pages it links to

//list-token/trade/portfolio

Endpoints

Called while loading (seen) or named in the code (code).

/api/launch/buildcodeE11
/api/tx/sendcodeE12
/api/withdrawcodeE13
/api/marketscodeE14
/api/pairscodeE15
/api/position/closecodeE16
/api/sessioncodeE17
/api/position/opencodeE18
/api/blockhashcodeE19
/api/usercodeE20
/api/pairs/launchcodeE21
/api/tokencodeE22
/api/pairs/createcodeE23
/api/pricecodeE24
/api/depositcodeE25
/api/historycodeE26
/api/pairs/add-liquiditycodeE27

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Short Pad | Short any pump.fun coin
page title · https://www.shortpad.space/
E2
Page description: List any pump.fun coin with its own pool and short it with up to 2x, settled in SOL. Short Pad is short only: you win when the chart goes down.
page description · https://www.shortpad.space/
E3
Site name: Short Pad
page site_name · https://www.shortpad.space/
E4
Main heading: Take the short side.
page h1 · https://www.shortpad.space/
E5
28 request(s) to www.shortpad.space
types: 14 script, 8 fetch, 3 stylesheet
GET https://www.shortpad.space/ · script · 28 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
1 request(s) to fonts.gstatic.com
types: 1 font
GET https://fonts.gstatic.com/s/funneldisplay/v3/B50WF7FGv37QNVWgE0ga--4Pbb6dDYs.woff2 · font · network recording
E8
Next.js detected by the code reader (next-runtime)
confidence: high
www.shortpad.space/_next/static/immutable/chunks/turbopack-3xd-7z66s-4wg.js · “next-runtime” · the code reader
E9
React detected by the code reader (react-runtime)
confidence: medium
www.shortpad.space/_next/static/immutable/chunks/08auoaor5ts71.js · “react-runtime” · the code reader
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
www.shortpad.space/_next/static/immutable/chunks/0mlu2x_akr4fn.js @ 1:1710 · “localStorage.setItem(” · pattern scan
E11
Code reader found the endpoint /api/launch/build
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3jp70yv8wvoyb.js @ 1:2427 · “/api/launch/build” · the code reader
E12
Code reader found the endpoint /api/tx/send
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3jp70yv8wvoyb.js @ 1:2763 · “/api/tx/send” · the code reader
E13
Code reader found the endpoint /api/withdraw
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:2099 · “/api/withdraw” · the code reader
E14
Code reader found the endpoint /api/markets
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:4651 · “/api/markets” · the code reader
E15
Code reader found the endpoint /api/pairs
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:4710 · “/api/pairs” · the code reader
E16
Code reader found the endpoint /api/position/close
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:5959 · “/api/position/close” · the code reader
E17
Code reader found the endpoint /api/session
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/0mlu2x_akr4fn.js @ 1:2741 · “/api/session” · the code reader
E18
Code reader found the endpoint /api/position/open
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/2qogw8mlqyarv.js @ 1:5730 · “/api/position/open” · the code reader
E19
Code reader found the endpoint /api/blockhash
how: call:fetch
www.shortpad.space/_next/static/immutable/chunks/2metbnybehyq0.js @ 1:3461 · “/api/blockhash” · the code reader
E20
The code names the endpoint /api/user
www.shortpad.space/_next/static/immutable/chunks/3ziy5129-dry_.js @ 1:4809 · “/api/user” · pattern scan
E21
The code names the endpoint /api/pairs/launch
www.shortpad.space/_next/static/immutable/chunks/3jp70yv8wvoyb.js @ 1:1501 · “/api/pairs/launch” · pattern scan
E22
The code names the endpoint /api/token
www.shortpad.space/_next/static/immutable/chunks/3jp70yv8wvoyb.js @ 1:7269 · “/api/token” · pattern scan
E23
The code names the endpoint /api/pairs/create
www.shortpad.space/_next/static/immutable/chunks/3jp70yv8wvoyb.js @ 1:7851 · “/api/pairs/create” · pattern scan
E24
The code names the endpoint /api/price
www.shortpad.space/_next/static/immutable/chunks/2qogw8mlqyarv.js @ 1:10240 · “/api/price” · pattern scan
E25
The code names the endpoint /api/deposit
www.shortpad.space/_next/static/immutable/chunks/2qogw8mlqyarv.js @ 1:11080 · “/api/deposit” · pattern scan
E26
The code names the endpoint /api/history
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:8689 · “/api/history” · pattern scan
E27
The code names the endpoint /api/pairs/add-liquidity
www.shortpad.space/_next/static/immutable/chunks/3rt3w_48q1ibe.js @ 1:11265 · “/api/pairs/add-liquidity” · pattern scan
E28
4 links to pages on the same site
page links · https://www.shortpad.space/ · /, /list-token, /trade, /portfolio
E29
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
www.shortpad.space/_next/static/immutable/chunks/0mlu2x_akr4fn.js @ 1:1631 · “signAndSendTransaction” · pattern scan
E30
Wallet request in code: signMessage
asks a wallet to sign a message
www.shortpad.space/_next/static/immutable/chunks/0mlu2x_akr4fn.js @ 1:1604 · “signMessage” · pattern scan
E31
The site says: “…urve or has graduated to PumpSwap. The mint is checked on chain before the listing goes live. What does listing cost?…”
page text · https://www.shortpad.space/ · …urve or has graduated to PumpSwap. The mint is checked on chain before the listing goes live. What does listing cost?…
E32
The Internet Archive has no saved copy of shortpad.space
page web archive · https://web.archive.org/web/*/shortpad.space
E33
Agent step 1: view
AI agent step 1 · view on /
E34
Agent step 2: click List a coin
AI agent step 2 · click on /list-token · page called GET www.shortpad.space/portfolio
E35
Agent step 3: type ...pump ← “test”
AI agent step 3 · type on /list-token
E36
Agent step 4: click Look up (not done: Locator.click: Timeout 4000ms exceeded.)
AI agent step 4 · click on /list-token
E37
Agent step 5: type test ← “9BB6NFEcjBCtnNLFko2FqVQBq8HHM13kCyYcdQbgpump”
AI agent step 5 · type on /list-token
E38
Agent step 6: click Look up
AI agent step 6 · click on /list-token · page called GET www.shortpad.space/api/token
E39
Agent step 7: type 9BB6NFEcjBCtnNLFko2FqVQBq8HHM13kCyYcdQbgpump ← “EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v”
AI agent step 7 · type on /list-token
E40
Agent step 8: click Look up
AI agent step 8 · click on /list-token · page called GET www.shortpad.space/api/token
E41
Agent step 9: go /trade
AI agent step 9 · go on /trade · page called GET www.shortpad.space/api/markets, GET www.shortpad.space/api/pairs, GET www.shortpad.space/, GET www.shortpad.space/trade, GET www.shortpad.space/list-token, GET www.shortpad.space/portfolio, GET www.shortpad.space/api/price

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 11 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id yY6zz1yz.