trenchcoat
Free · no sign-up
Website report · 17 h ago

useweb.fun

“WEB: a worldwide web of holders”

Template-written 62 evidence items Code reader analysed 2 scripts
What this means for you

WEB talked to 1 outside service on a first visit.E6

  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E60

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /api/config, /api/world, /api/feedE13E14E15E16
Wallet code PhantomE8E60E61
Contract calls in its code none seen
Talks to AI services none seen
Live connections receives a live stream of updates from a serverE11

What it is

  • The Internet Archive has never saved this site, so it is probably new.E62
  • The site describes itself as: “Bags of $WEB are hidden in real places all over the world: get there, snap a proof, and the bag lands in your wallet.”E2
  • It's built with React (common tools for building web apps).E7
  • In your browser it can ask for your location, saves small bits of data in your browser and receives a live stream of updates from a server.E9E10E11
  • It has sections such as /bags, /board, /strand, /bag, /feed and /you.E49E50
  • While loading, it called 5 endpoints on its own servers, such as /api/config, /api/world, /api/feed and 2 more.E13E14E15E16

Where your data goes

Not identifiedServices we don't have in our list yet. 1
cdn.web.qqqqqqqqqqqqqqqqq.xyznot identified 1×E6

Crypto and wallets

  • Wallet tools in the code: Phantom.E8
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E60
  • signMessage: asks a wallet to sign a message.E61

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E60

signTransaction

Connecting your wallet

It connects to crypto wallets using Phantom, signTransaction and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E8

PhantomsignTransactionsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/nonce, /api/auth/verify, /v1/auth/challenge and /v1/auth/verify).E32E33E36

/api/auth/nonce/api/auth/verify/v1/auth/challenge/v1/auth/verify

Live updates

It keeps live connections open (server-sent events) so content updates without reloading.E11

event_source

Loading its content

Its content loads from its own API while you browse (/api/config, /api/world, /api/feed, /api/me and 1 more).E13E14E15E16E17

/api/config/api/world/api/feed/api/me/official.json

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E12

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10

local_storage

Pages and API calls

Pages it links to

//bags/board/strand/bag/feed/you/card/home/card/bag/:id//bags/feed/board/strand/you/bag/:id*

Endpoints

Called while loading (seen) or named in the code (code).

useweb.fun/api/configseenE13
useweb.fun/api/worldseenE14
useweb.fun/api/feedseenE15
useweb.fun/api/meseenE16
useweb.fun/official.jsonseenE17
/official.jsoncodeE18
/youcodeE19
/feedcodeE20
/bagscodeE21
/card/bag/:idcodeE22
/boardcodeE23
/card/homecodeE24
/strandcodeE25
/bag/:idcodeE26
/api/boardcodeE27
/api/me/startcodeE28
/api/me/geocodeE29
/api/me/handlecodeE30
/api/me/walletcodeE31
/api/auth/noncecodeE32
/api/auth/verifycodeE33
/api/streamcodeE34
/v1/configcodeE35
/v1/auth/challengecodeE36
/v1/auth/verifycodeE37
/v1/tokenscodeE38
/v1/tokens/streamcodeE39
/v1/launch/preparecodeE40
/v1/launch/prepare-and-mintcodeE41
/v1/launch/submitcodeE42

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: WEB: a worldwide web of holders
page title · https://useweb.fun/
E2
Page description: Bags of $WEB are hidden in real places all over the world: get there, snap a proof, and the bag lands in your wallet.
page description · https://useweb.fun/
E3
Site name: WEB
page site_name · https://useweb.fun/
E4
Main heading: Get there. Snap a proof. Keep the bag.
page h1 · https://useweb.fun/
E5
14 request(s) to useweb.fun
types: 5 fetch, 3 eventsource, 2 script
GET https://useweb.fun/ · fetch · 14 requests · network recording
E6
1 request(s) to cdn.web.qqqqqqqqqqqqqqqqq.xyz
types: 1 image
GET https://cdn.web.qqqqqqqqqqqqqqqqq.xyz/a/land-YXim14B4.png · image · network recording
E7
React detected by the code reader (react-runtime)
confidence: medium
useweb.fun/assets/index-DQTsVYR2.js · “react-runtime” · the code reader
E8
Phantom found in the code
useweb.fun/assets/index-DQTsVYR2.js @ 70:68691 · “phantom.app” · pattern scan
E9
Uses the browser ability: geolocation
can ask for your location
useweb.fun/assets/index-DQTsVYR2.js @ 68:6195 · “navigator.geolocation.getCurrentPosition” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
useweb.fun/assets/index-DQTsVYR2.js @ 68:6995 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: event_source
receives a live stream of updates from a server
useweb.fun/assets/index-DQTsVYR2.js @ 68:8041 · “new EventSource(” · pattern scan
E12
Uses the browser ability: canvas
draws graphics on a canvas
useweb.fun/assets/index-DQTsVYR2.js @ 70:58393 · “getContext("2d"” · pattern scan
E13
The page called /api/config on useweb.fun (GET)
GET https://useweb.fun/api/config · fetch · network recording
E14
The page called /api/world on useweb.fun (GET)
GET https://useweb.fun/api/world · fetch · network recording
E15
The page called /api/feed on useweb.fun (GET)
GET https://useweb.fun/api/feed · fetch · network recording
E16
The page called /api/me on useweb.fun (GET)
GET https://useweb.fun/api/me · fetch · network recording
E17
The page called /official.json on useweb.fun (GET)
GET https://useweb.fun/official.json · fetch · network recording
E18
Code reader found the endpoint /official.json
how: call:fetch
useweb.fun/assets/index-DQTsVYR2.js @ 68:5521 · “/official.json” · the code reader
E19
Code reader found the endpoint /you
how: property:path
s00-index-DQTsVYR2.js · “/you” · the code reader
E20
Code reader found the endpoint /feed
how: property:path
s00-index-DQTsVYR2.js · “/feed” · the code reader
E21
Code reader found the endpoint /bags
how: property:path
s00-index-DQTsVYR2.js · “/bags” · the code reader
E22
Code reader found the endpoint /card/bag/:id
how: property:path
s00-index-DQTsVYR2.js · “/card/bag/:id” · the code reader
E23
Code reader found the endpoint /board
how: property:path
s00-index-DQTsVYR2.js · “/board” · the code reader
E24
Code reader found the endpoint /card/home
how: property:path
s00-index-DQTsVYR2.js · “/card/home” · the code reader
E25
Code reader found the endpoint /strand
how: property:path
s00-index-DQTsVYR2.js · “/strand” · the code reader
E26
Code reader found the endpoint /bag/:id
how: property:path
s00-index-DQTsVYR2.js · “/bag/:id” · the code reader
E27
The code names the endpoint /api/board
useweb.fun/assets/index-DQTsVYR2.js @ 68:5112 · “/api/board” · pattern scan
E28
The code names the endpoint /api/me/start
useweb.fun/assets/index-DQTsVYR2.js @ 68:5160 · “/api/me/start” · pattern scan
E29
The code names the endpoint /api/me/geo
useweb.fun/assets/index-DQTsVYR2.js @ 68:5196 · “/api/me/geo” · pattern scan
E30
The code names the endpoint /api/me/handle
useweb.fun/assets/index-DQTsVYR2.js @ 68:5244 · “/api/me/handle” · pattern scan
E31
The code names the endpoint /api/me/wallet
useweb.fun/assets/index-DQTsVYR2.js @ 68:5286 · “/api/me/wallet” · pattern scan
E32
The code names the endpoint /api/auth/nonce
useweb.fun/assets/index-DQTsVYR2.js @ 68:5328 · “/api/auth/nonce” · pattern scan
E33
The code names the endpoint /api/auth/verify
useweb.fun/assets/index-DQTsVYR2.js @ 68:5375 · “/api/auth/verify” · pattern scan
E34
The code names the endpoint /api/stream
useweb.fun/assets/index-DQTsVYR2.js @ 68:8058 · “/api/stream” · pattern scan
E35
The code names the endpoint /v1/config
useweb.fun/assets/index-DQTsVYR2.js @ 70:1673 · “/v1/config” · pattern scan
E36
The code names the endpoint /v1/auth/challenge
useweb.fun/assets/index-DQTsVYR2.js @ 70:1726 · “/v1/auth/challenge” · pattern scan
E37
The code names the endpoint /v1/auth/verify
useweb.fun/assets/index-DQTsVYR2.js @ 70:1818 · “/v1/auth/verify” · pattern scan
E38
The code names the endpoint /v1/tokens
useweb.fun/assets/index-DQTsVYR2.js @ 70:1934 · “/v1/tokens” · pattern scan
E39
The code names the endpoint /v1/tokens/stream
useweb.fun/assets/index-DQTsVYR2.js @ 70:2343 · “/v1/tokens/stream” · pattern scan
E40
The code names the endpoint /v1/launch/prepare
useweb.fun/assets/index-DQTsVYR2.js @ 70:2940 · “/v1/launch/prepare” · pattern scan
E41
The code names the endpoint /v1/launch/prepare-and-mint
useweb.fun/assets/index-DQTsVYR2.js @ 70:3046 · “/v1/launch/prepare-and-mint” · pattern scan
E42
The code names the endpoint /v1/launch/submit
useweb.fun/assets/index-DQTsVYR2.js @ 70:3466 · “/v1/launch/submit” · pattern scan
E43
The code names the endpoint /v1/launch/cosign
useweb.fun/assets/index-DQTsVYR2.js @ 70:3619 · “/v1/launch/cosign” · pattern scan
E44
The code names the endpoint /v1/trade/quote
useweb.fun/assets/index-DQTsVYR2.js @ 70:3791 · “/v1/trade/quote” · pattern scan
E45
The code names the endpoint /v1/trade/buy
useweb.fun/assets/index-DQTsVYR2.js @ 70:3935 · “/v1/trade/buy” · pattern scan
E46
The code names the endpoint /v1/trade/sell
useweb.fun/assets/index-DQTsVYR2.js @ 70:4087 · “/v1/trade/sell” · pattern scan
E47
The code names the endpoint /v1/tx/submit
useweb.fun/assets/index-DQTsVYR2.js @ 70:4227 · “/v1/tx/submit” · pattern scan
E48
The code names the endpoint /v1/creator/claim
useweb.fun/assets/index-DQTsVYR2.js @ 70:4353 · “/v1/creator/claim” · pattern scan
E49
35 links to pages on the same site
page links · https://useweb.fun/ · /, /bags, /board, /strand, /bag, /feed, /you
E50
Code reader found the route /card/home
useweb.fun/assets/index-DQTsVYR2.js @ 70:112465 · “/card/home” · the code reader
E51
Code reader found the route /card/bag/:id
useweb.fun/assets/index-DQTsVYR2.js @ 70:112516 · “/card/bag/:id” · the code reader
E52
Code reader found the route /
useweb.fun/assets/index-DQTsVYR2.js @ 70:112699 · “/” · the code reader
E53
Code reader found the route /bags
useweb.fun/assets/index-DQTsVYR2.js @ 70:112741 · “/bags” · the code reader
E54
Code reader found the route /feed
useweb.fun/assets/index-DQTsVYR2.js @ 70:112787 · “/feed” · the code reader
E55
Code reader found the route /board
useweb.fun/assets/index-DQTsVYR2.js @ 70:112833 · “/board” · the code reader
E56
Code reader found the route /strand
useweb.fun/assets/index-DQTsVYR2.js @ 70:112880 · “/strand” · the code reader
E57
Code reader found the route /you
useweb.fun/assets/index-DQTsVYR2.js @ 70:112928 · “/you” · the code reader
E58
Code reader found the route /bag/:id
useweb.fun/assets/index-DQTsVYR2.js @ 70:112973 · “/bag/:id” · the code reader
E59
Code reader found the route *
useweb.fun/assets/index-DQTsVYR2.js @ 70:113022 · “*” · the code reader
E60
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
useweb.fun/assets/index-DQTsVYR2.js @ 70:4506 · “signTransaction” · pattern scan
E61
Wallet request in code: signMessage
asks a wallet to sign a message
useweb.fun/assets/index-DQTsVYR2.js @ 70:8576 · “signMessage” · pattern scan
E62
The Internet Archive has no saved copy of useweb.fun
page web archive · https://web.archive.org/web/*/useweb.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id VItVgbSD.