trygrail.fun talked to 5 outside services on a first visit.E9E8E7E5
Tech check: the site claims on-chain / smart contracts and wallet connection, and its public page shows matching evidence.E250E251E170E171E172
We saw no known analytics or advertising services load on the first visit.E1
3 cookies were set in your browser, 3 of them by other companies' domains.E10E11E12
Its code can ask your wallet to give an old-style 'eth_sign' signature, approve token spending, raise token spending approvals, sign structured data (logins, orders or off-chain approvals) and 3 more. Read every wallet pop-up before approving.E160E167E168E161E162E166
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
Evidence found
On-chain / smart contracts
“…e feed 11 markets USDC isolated margin Physical slabs. On-chain ownership. THE GRAIL EXCHANGE One index. Ten icons. A…”E250
Contract calls in its code: aggregate3, query, addrE170E171E172E173
Blockchains named in its code: Arbitrum One, Arbitrum Sepolia, AvalancheE230E231E232E233
Blockchain services it contacts: Privy, WalletConnect / ReownE9E8
Wallet requests in its code: eth_sign, approve, increaseAllowanceE160E167E168E161
Evidence found
Wallet connection
“…rail. Trade Markets Mint a slab Portfolio Reserve Docs Connect wallet GRAIL Markets + Deposit USDC Pokémon reference feed 11…”E251
Wallet libraries in its code: Privy (wallet login), WalletConnect / Reown, viemE16E17E18E19
Wallet requests in its code: eth_sign, approve, increaseAllowanceE160E167E168E161
Calls its own backend/api/slab/status, /api/slab/markets/pokemon/chart, /api/slab/markets/pokemon/bookE27E28E29E30
Contract calls in its codeaggregate3, query, addrE170E171E172E173
Talks to AI servicesnone seen
Live connectionsnone seen
What it is
The site describes itself as: “GRAIL Pokémon card perpetual markets. Long or short a Pokémon index and ten graded card references, with USDC collateral and fee-funded prof”E2
It's built with React (common tools for building web apps).E15
In your browser it can copy text to your clipboard, stores data in your browser's built-in database and saves small bits of data in your browser.E23E24E25
It has sections such as /api/v1/analytics_events, /api/v1/apps/:app_id, /api/v1/funding/coinbase_on_ramp/init, /api/v1/funding/coinbase_on_ramp/status, /api/v1/apps/:app_id/cross-app/connections and /api/v1/custom_jwt_account/authenticate.E97E98
While loading, it called 4 endpoints on its own servers, such as /api/slab/status, /api/slab/markets/pokemon/chart, /api/slab/markets/pokemon/book and 1 more.E27E28E29E30
Where your data goes
Crypto & walletsConnect wallets, read blockchains or fetch token prices.2
Wallet tools in the code: Privy (wallet login), WalletConnect / Reown, viem, Coinbase Wallet SDK, thirdweb, Phantom and 1 more.E16E17E18E19E20E21
eth_sign: can ask for a raw 'eth_sign' signature, an old method that signs data you can't read.E160
approve: has code to ask for a token spending approval (lets a contract move that token from your wallet).E167
increaseAllowance: has code to raise a token spending approval.E168
eth_signTypedData: asks you to sign structured data (can be a login, an order or an off-chain token approval).E161
eth_sendTransaction: asks your wallet to send a transaction (can move funds and costs a fee).E162
wallet_sendCalls: asks your wallet to send a batch of transactions in one go.E166
Contract functions the app calls by name: aggregate3, query, addr, resolveWithGateways, tokenURI, uri, text, reverseWithGateways and 22 more.E170E171E172E173E174E175
Chains named in the code: Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji, Celo Mainnet, Celo Alfajores Testnet, Filecoin - Mainnet, Filecoin - Calibration testnet and 12 more.E230E231E232E233E234E235
30 contract or wallet addresses are written into the code, including Multicall3 (batches read calls) and USDC on Ethereum.E210E224
30 addresses found in the code
0x00000000000000000000000000000000deadbeef0xaa4de41dba0ca5dcbb288b7cc6b708f3aac759e70xfb688330379976da81eb64fe4bf50d7401763b9c0xf9cda624fbc7e059355ce98a31693d299facd9630x420000000000000000000000000000000000000f0x42000000000000000000000000000000000000150x42000000000000000000000000000000000000070x42000000000000000000000000000000000000140x42000000000000000000000000000000000000100x42000000000000000000000000000000000000160xca11bde05977b3631167028862be2a173976ca11 · Multicall3 (batches read calls)0x43edb88c4b80fdd2adff2412a7bebf9df42cb40e0x56315b90c40730925ec5485cf004d835058518a00x49048044d57e1c92a77f79988d21fa8faf74e97e0x3154cf16ccdb4c6d922629664174b904d80f2c350xd6e6dbf4f7ea0ac412fd8b65ed297e64bb7a06e10x84457ca9d0163fbc4bbfe4dfbb20ba46e48df2540x49f53e41452c74589e85ca1677426ba426459e850xfd0bf71f60660e2f608ed56e1659c450eb1131200xb5cecd6894c6f473ec726a176f1512399a2e355d0x5dc881dda4e4a8d312be3544ad13118d1a04cb170xddfb18888a9466688235887dec2a10c4f5effee90xaacc0000000000000000000000000000000000000x51653000000000000000000000000000000000000xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 · USDC on Ethereum0x1c7d4b196cb0c7b01d743fbc6116a902379c72380x0b2c639c533813f4aa9d7837caf62653d097ff850x5fd84259d66cd46123540766be93dfe6d43130d70x3c499c542cef5e3811e1192ce70d8cc03d5c33590x41e94eb019c0762f9bfcf9fb1e58725bfb0e7582
Paste any of these into the box on the home page to get the contract's blueprint.
How key features work
What it can ask your wallet to sign
Its code can ask your wallet for eth_sign, approve, increaseAllowance, eth_signTypedData and 4 more. Each of these opens a wallet pop-up you must approve; read it before you click.E160E167E168E161E162E166
It connects to crypto wallets using Privy (wallet login), WalletConnect / Reown, viem, Coinbase Wallet SDK and 4 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E16E17E18E19E20E21
It reads blockchain data (Arbitrum One, Arbitrum Sepolia, Avalanche, Avalanche Fuji and 4 more) to show balances, prices or contract state.E230E231E232
Sign-in and account features show up in its code or traffic (/api/v2/farcaster/authenticate, /api/v1/recovery/oauth/authenticate, /api/v1/wallets/:wallet_id/deposit_accounts/crypto/next_order and /api/v1/onramp/stripe/create_link_auth_intent).E35E37E39
Its content loads from its own API while you browse (/api/slab/status, /api/slab/markets/pokemon/chart, /api/slab/markets/pokemon/book and /api/config).E27E28E29E30
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: GRAIL — Pokémon perpetuals
page title · https://trygrail.fun/
E2
Page description: GRAIL Pokémon card perpetual markets. Long or short a Pokémon index and ten graded card references, with USDC collateral and fee-funded profit reserve
page description · https://trygrail.fun/
E3
Main heading: One index. Ten icons.
page h1 · https://trygrail.fun/
E4
44 request(s) to trygrail.fun
types: 32 script, 7 fetch, 3 image
GET https://trygrail.fun/ · script · 44 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
21 request(s) to d1xpxki1g4htqu.cloudfront.net
types: 21 image
GET https://d1xpxki1g4htqu.cloudfront.net/fSkUSYAdj4qVmYEIdMuKqNPPBm6JPKCytIhtEMqtbT8 · image · 21 requests · network recording
E7
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 · font · 3 requests · network recording
E8
5 request(s) to explorer-api.walletconnect.com
types: 3 image, 2 fetch
GET https://explorer-api.walletconnect.com/v3/wallets · image · 5 requests · network recording
E9
39 request(s) to auth.privy.io
types: 34 script, 2 fetch, 1 document
GET https://auth.privy.io/api/v1/apps/cmuqmfexg00lp0bl6pp6hlffy · script · 39 requests · network recording
E10
Cookie '_cfuvid' set for privy.io
session cookie
cookie _cfuvid on privy.io · value not stored
E11
Cookie 'cf_clearance' set for privy.io
kept for about 365 days
cookie cf_clearance on privy.io · value not stored
E12
Cookie '__cf_bm' set for privy.io
kept for about 0 days
cookie __cf_bm on privy.io · value not stored
E13
localStorage: 3 key(s) saved in your browser
localStorage keys: privy:caid, privy:sent:cmuqmfexg00lp0bl6pp6hlffy:112, privy:connections · values not stored
E14
IndexedDB: 1 key(s) saved in your browser
IndexedDB keys: WALLET_CONNECT_V2_INDEXED_DB · values not stored
E15
React detected by REA (react-runtime)
confidence: medium
trygrail.fun/assets/index-kWndEbzv.js · “react-runtime” · REA analyze-web-bundle 6.4.0
The site says: “…e feed 11 markets USDC isolated margin Physical slabs. On-chain ownership. THE GRAIL EXCHANGE One index. Ten icons. A…”
page text · https://trygrail.fun/ · …e feed 11 markets USDC isolated margin Physical slabs. On-chain ownership. THE GRAIL EXCHANGE One index. Ten icons. A…
E251
The site says: “…rail. Trade Markets Mint a slab Portfolio Reserve Docs Connect wallet GRAIL Markets + Deposit USDC Pokémon reference feed 11…”
page text · https://trygrail.fun/ · …rail. Trade Markets Mint a slab Portfolio Reserve Docs Connect wallet GRAIL Markets + Deposit USDC Pokémon reference feed 11…
Limits
We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
REA hit its size budget on parts of 32 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 0jvlF4KP.
$yoki酱new
$ADTFnew
$Frongusnew
$BNCInew
$FWONGUSnew
$BNCInew
$ELON2028new
$yoki酱new
$RACCOONnew
$USEOnew
$DOASnew
$ELSEnew
$NEX Ainew
$Frongusnew
$VEIL
$PAID
$BATON
$DARK
$XTO
$MISTAKE
$HOOKED
$E/ACC