Website blueprint · 28 Oct 2026

exfil.fun

“Exfil Arena · Every coin is a hill”

Template-written 13 evidence items REA analysed 3 scripts
What this means for you

Exfil talked to 2 outside services on a first visit.E7E6

  • Tech check: the site claims a working app / platform, and its public page shows matching evidence.E12E9
  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

A working app / platform

“…NDERWATER BEFORE YOU BUY EXFIL Arena Leagues Stats Web terminal (beta) Get the App Every Coin Is a Hill. Claim Your Sp…”E12

Calls to its own backend: /api/mobileE9

Calls its own backend /api/mobileE9
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2021-12-02 (1791 days ago).E13
  • The site describes itself as: “Every holder of a memecoin is a rat on the hill. See who's up, who's underwater, and who could sell into you, then trade on iPhone or Androi”E2
  • In your browser it draws graphics on a canvas.E8
  • It has sections such as /home, /stats, /trade, /support, /privacy and /delete-account.E11
  • While loading, it called 1 endpoint on its own servers, such as /api/mobile.E9

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E6

How key features work

Loading its content

Its content loads from its own API while you browse (/api/mobile).E9

/api/mobile

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E8

canvas

Pages and API calls

Pages it links to

//home/stats/trade/support/privacy/delete-account

Endpoints

Called while loading (seen) or named in the code (code).

exfil.fun/api/mobileseenE9
/api/mobilecodeE10

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Exfil Arena · Every coin is a hill
page title · https://exfil.fun/home
E2
Page description: Every holder of a memecoin is a rat on the hill. See who's up, who's underwater, and who could sell into you, then trade on iPhone or Android.
page description · https://exfil.fun/home
E3
Site name: Exfil
page site_name · https://exfil.fun/home
E4
Main heading: Every Coin Is a Hill. Claim Your Spot.
page h1 · https://exfil.fun/home
E5
19 request(s) to exfil.fun
types: 11 image, 5 media, 2 document
GET https://exfil.fun/ · image · 19 requests · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/manrope/v23/xn7gYHE41ni1AdIRggexSg.woff2 · font · 3 requests · network recording
E8
Uses the browser ability: canvas
draws graphics on a canvas
exfil.fun/ (page HTML) @ 456:141 · “getContext('2d'” · pattern scan
E9
The page called /api/mobile on exfil.fun (GET)
GET https://exfil.fun/api/mobile · fetch · network recording
E10
REA found the endpoint /api/mobile
how: call:fetch
exfil.fun/home @ 91:21 · “/api/mobile” · REA analyze-web-bundle 6.4.0
E11
7 links to pages on the same site
page links · https://exfil.fun/home · /, /home, /stats, /trade, /support, /privacy, /delete-account
E12
The site says: “…NDERWATER BEFORE YOU BUY EXFIL Arena Leagues Stats Web terminal (beta) Get the App Every Coin Is a Hill. Claim Your Sp…”
page text · https://exfil.fun/home · …NDERWATER BEFORE YOU BUY EXFIL Arena Leagues Stats Web terminal (beta) Get the App Every Coin Is a Hill. Claim Your Sp…
E13
The Internet Archive first saved exfil.fun on 2021-12-02 and has snapshots from 7 different days
page web archive · https://web.archive.org/web/20211202171049/exfil.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 7alU9luu.