Website report · 2 h ago

notilt.fun

“NOTILT”

Template-written 22 evidence items Code reader analysed 2 scripts
What this means for you

notilt.fun talked to 2 outside services on a first visit.E6E5

  • We saw no known analytics or advertising services load on the first visit.E1

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /api/meE12
Wallet code PhantomE7E21
Contract calls in its code none seen
Talks to AI services none seen
Live connections receives a live stream of updates from a serverE10

What it is

  • The Internet Archive has never saved this site, so it is probably new.E22
  • The site describes itself as: “Train your degen brain. Lose fake money. Learn something real.”E2
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and receives a live stream of updates from a server.E8E9E10
  • It has sections such as /docs.E20
  • While loading, it called 1 endpoint on its own servers, such as /api/me.E12

Where your data goes

FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E6
fonts.googleapis.comGoogle Fonts: fonts 1×E5

Crypto and wallets

  • Wallet tools in the code: Phantom.E7
  • signMessage: asks a wallet to sign a message.E21

How key features work

Connecting your wallet

It connects to crypto wallets using Phantom and signMessage. Connecting shows the site your wallet address; it doesn't move funds by itself.E7

PhantomsignMessage

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/nonce, /api/auth/wallet and /api/auth/logout).E15E16E17

/api/auth/nonce/api/auth/wallet/api/auth/logout

Live updates

It keeps live connections open (server-sent events) so content updates without reloading.E10

event_source

Loading its content

Its content loads from its own API while you browse (/api/me).E12

/api/me

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E11

canvas

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E9

local_storage

Pages and API calls

Pages it links to

//docs

Endpoints

Called while loading (seen) or named in the code (code).

notilt.fun/api/meseenE12
/api/me/profilecodeE13
/api/mecodeE14
/api/auth/noncecodeE15
/api/auth/walletcodeE16
/api/auth/logoutcodeE17
/api/pricescodeE18
/api/prices/streamcodeE19

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: NOTILT
page title · https://notilt.fun/
E2
Page description: Train your degen brain. Lose fake money. Learn something real.
page description · https://notilt.fun/
E3
Main heading: A COIN YOU SKIPPED IS NOW +500%. YOU:
page h1 · https://notilt.fun/
E4
6 request(s) to notilt.fun
types: 2 script, 1 document, 1 stylesheet
GET https://notilt.fun/ · script · 6 requests · network recording
E5
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E6
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtq.woff2 · font · 3 requests · network recording
E7
Phantom found in the code
notilt.fun/app.js @ 1087:23 · “window.phantom” · pattern scan
E8
Uses the browser ability: clipboard_write
can copy text to your clipboard
notilt.fun/app.js @ 1081:21 · “clipboard.writeText(” · pattern scan
E9
Uses the browser ability: local_storage
saves small bits of data in your browser
notilt.fun/app.js @ 41:33 · “localStorage.setItem(” · pattern scan
E10
Uses the browser ability: event_source
receives a live stream of updates from a server
notilt.fun/app.js @ 1183:14 · “new EventSource(” · pattern scan
E11
Uses the browser ability: canvas
draws graphics on a canvas
notilt.fun/app.js @ 926:16 · “getContext('2d'” · pattern scan
E12
The page called /api/me on notilt.fun (GET)
GET https://notilt.fun/api/me · fetch · network recording
E13
Code reader found the endpoint /api/me/profile
how: call:fetch
notilt.fun/app.js @ 42:26 · “/api/me/profile” · the code reader
E14
Code reader found the endpoint /api/me
how: call:fetch
notilt.fun/app.js @ 1101:31 · “/api/me” · the code reader
E15
Code reader found the endpoint /api/auth/nonce
how: call:post
notilt.fun/app.js @ 1111:20 · “/api/auth/nonce” · the code reader
E16
Code reader found the endpoint /api/auth/wallet
how: call:post
notilt.fun/app.js @ 1116:20 · “/api/auth/wallet” · the code reader
E17
Code reader found the endpoint /api/auth/logout
how: call:fetch
notilt.fun/app.js @ 1150:14 · “/api/auth/logout” · the code reader
E18
Code reader found the endpoint /api/prices
how: call:fetch
notilt.fun/app.js @ 1181:61 · “/api/prices” · the code reader
E19
The code names the endpoint /api/prices/stream
notilt.fun/app.js @ 1183:31 · “/api/prices/stream” · pattern scan
E20
2 links to pages on the same site
page links · https://notilt.fun/ · /, /docs
E21
Wallet request in code: signMessage
asks a wallet to sign a message
notilt.fun/app.js @ 1115:38 · “signMessage” · pattern scan
E22
The Internet Archive has no saved copy of notilt.fun
page web archive · https://web.archive.org/web/*/notilt.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id nlKXAzvR.