trenchcoat
Free · no sign-up
Website report · 4 h ago

paymybilly.com

“pay my billy”

Template-written 21 evidence items Code reader analysed 2 scripts
What this means for you

pay my billy talked to 2 outside services on a first visit.E6E5

  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /api/account, /api/billsE13E14
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2026-10-24 (13 days ago).E21
  • The site describes itself as: “Post a bill. Let someone with moola pay it. In Billy we trust.”E2
  • In your browser it installs a background script (offline use, push messages), saves small bits of data in your browser and can open your device's share menu.E9E10E11
  • It has sections such as /profile, /my-bills, /faq, /terms and /privacy.E20
  • While loading, it called 2 endpoints on its own servers, such as /api/account and /api/bills.E13E14

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 2×E6
fonts.googleapis.comGoogle Fonts: fonts 1×E5

How key features work

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/account).E13E17

/api/account

Loading its content

Its content loads from its own API while you browse (/api/account and /api/bills).E13E14

/api/account/api/bills

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Saving data on your device

It saves data in your browser (a service worker and localStorage), so some things persist between visits.E9E10E7

service_workerlocal_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE7: pmb-device

Pages and API calls

Pages it links to

/profile/my-bills/faq/terms/privacy

Endpoints

Called while loading (seen) or named in the code (code).

paymybilly.com/api/accountseenE13
paymybilly.com/api/billsseenE14
/api/billscodeE15
/api/checkoutcodeE16
/api/accountcodeE17
/apicodeE18
/api/configcodeE19

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: pay my billy
page title · https://paymybilly.com/
E2
Page description: Post a bill. Let someone with moola pay it. In Billy we trust.
page description · https://paymybilly.com/
E3
Site name: pay my billy
page site_name · https://paymybilly.com/
E4
6 request(s) to paymybilly.com
types: 3 image, 2 fetch, 1 document
GET https://paymybilly.com/ · image · 6 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 · font · 2 requests · network recording
E7
localStorage: 1 key(s) saved in your browser
localStorage keys: pmb-device · values not stored
E8
Cloudflare Turnstile found in the code
paymybilly.com/ (page HTML) @ 327:98 · “challenges.cloudflare.com/turnstile” · pattern scan
E9
Uses the browser ability: service_worker
installs a background script (offline use, push messages)
paymybilly.com/ (page HTML) @ 1065:51 · “serviceWorker.register(” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
paymybilly.com/ (page HTML) @ 312:219 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: web_share
can open your device's share menu
paymybilly.com/ (page HTML) @ 678:13 · “navigator.share(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
paymybilly.com/ (page HTML) @ 652:92 · “getContext('2d'” · pattern scan
E13
The page called /api/account on paymybilly.com (GET)
GET https://paymybilly.com/api/account · fetch · network recording
E14
The page called /api/bills on paymybilly.com (GET)
GET https://paymybilly.com/api/bills · fetch · network recording
E15
Code reader found the endpoint /api/bills
how: call:fetch
paymybilly.com/ @ 44:20 · “/api/bills” · the code reader
E16
Code reader found the endpoint /api/checkout
how: call:fetch
paymybilly.com/ @ 218:20 · “/api/checkout” · the code reader
E17
Code reader found the endpoint /api/account
how: call:fetch
paymybilly.com/ @ 319:0 · “/api/account” · the code reader
E18
The code names the endpoint /api
paymybilly.com/ (page HTML) @ 316:47 · “/api” · pattern scan
E19
The code names the endpoint /api/config
paymybilly.com/ (page HTML) @ 324:17 · “/api/config” · pattern scan
E20
5 links to pages on the same site
page links · https://paymybilly.com/ · /profile, /my-bills, /faq, /terms, /privacy
E21
The Internet Archive first saved paymybilly.com on 2026-10-24 and has snapshots from 2 different days
page web archive · https://web.archive.org/web/20261024170535/paymybilly.com

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 8mbiEaBb.