trenchcoat
Free · no sign-up
Website report · 09 Nov 2026

ballfin.win

“Ballfin · A new Ballionaire every week”

Template-written 23 evidence items Code reader analysed 5 scripts
What this means for you

ballfin.win talked to 3 outside services on a first visit, including 1 that measures visits or shows ads.E5

  • An AI agent used the site and saw 0 of 1 claimed features working.E19E22
  • On-chain / smart contracts: weekly draw on Solana, trading fees go into one pot: The page shows a pot ($6.38 in unclaimed creator fees), a countdown to the next draw, 45,751 tickets across 40 wallets, a top-50 holder table with Solscan account links, and two past payouts with Solscan transaction links. No network calls were seen during any step, and checking the draw and payouts on-chain requires the off-site Solscan explorer, so the on-chain behaviour could not be confirmed fE19E22
  • Also noticed, Leaderboard expands to full holder list: Clicking 'Show top 50' expanded the table from 10 to all 40 ticket-holding wallets, with ticket counts and odds. The 'Updated live' timer only advanced from 18 to 28 seconds, and no data refresh showed up in the network log.E22
  • Also noticed, Wallet odds checker only gave a format error: Typing an address into the wallet field was blocked by the sandbox. Clicking 'Check odds' with the field empty showed 'That is not a Solana wallet address.' Opening /api/state returned an empty page.E20E21E23
  • Tech check: the site mentions on-chain / smart contracts, but we found nothing behind it in what its public page loads.E17
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics.E5

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

On-chain / smart contracts

“…BALLFIN A weekly draw on Solana The GTA 6 lottery, now on-chain. Trading fees go into one pot. The more BALLFIN you ho…”E17

No matching code, calls or services in what loaded for us.

Calls its own backend /api/holders, /api/fees, /api/drawE12E13E14
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 5 steps and saw 0 of 1 claimed feature working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Couldn't test

On-chain / smart contracts: weekly draw on Solana, trading fees go into one pot

The page shows a pot ($6.38 in unclaimed creator fees), a countdown to the next draw, 45,751 tickets across 40 wallets, a top-50 holder table with Solscan account links, and two past payouts with Solscan transaction links. No network calls were seen during any step, and checking the draw and payouts on-chain requires the off-site Solscan explorer, so the on-chain behaviour could not be confirmed fE19E22

Also noticed

Things the agent saw along the way that aren't among the site's claims. Not counted above.

Noticed

Leaderboard expands to full holder list

Clicking 'Show top 50' expanded the table from 10 to all 40 ticket-holding wallets, with ticket counts and odds. The 'Updated live' timer only advanced from 18 to 28 seconds, and no data refresh showed up in the network log.E22

Noticed

Wallet odds checker only gave a format error

Typing an address into the wallet field was blocked by the sandbox. Clicking 'Check odds' with the field empty showed 'That is not a Solana wallet address.' Opening /api/state returned an empty page.E20E21E23

What it is

  • The Internet Archive has never saved this site, so it is probably new.E18
  • The site describes itself as: “A Solana coin where trading fees go into one pot. Every 10,000 BALLFIN held is one ticket. Every 7 days one ticket wins the whole pot.”E2
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E9E10
  • While loading, it called 3 endpoints on its own servers, such as /api/holders, /api/fees and /api/draw.E12E13E14

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E5
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 2×E7
fonts.googleapis.comGoogle Fonts: fonts 1×E6

How key features work

Loading its content

Its content loads from its own API while you browse (/api/holders, /api/fees and /api/draw).E12E13E14

/api/holders/api/fees/api/draw

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E11

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E5

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E10E8

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE8: ballfin-pot

Pages and API calls

Pages it links to

/

Endpoints

Called while loading (seen) or named in the code (code).

ballfin.win/api/holdersseenE12
ballfin.win/api/feesseenE13
ballfin.win/api/drawseenE14
/apicodeE15

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Ballfin · A new Ballionaire every week
page title · https://ballfin.win/
E2
Page description: A Solana coin where trading fees go into one pot. Every 10,000 BALLFIN held is one ticket. Every 7 days one ticket wins the whole pot.
page description · https://ballfin.win/
E3
Main heading: The GTA 6 lottery, now on-chain.
page h1 · https://ballfin.win/
E4
17 request(s) to ballfin.win
types: 7 image, 4 script, 3 fetch
GET https://ballfin.win/ · image · 17 requests · network recording
E5
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E6
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E7
2 request(s) to fonts.gstatic.com
types: 2 font
GET https://fonts.gstatic.com/s/jost/v20/92zatBhPNqw73oTd4g.woff2 · font · 2 requests · network recording
E8
localStorage: 1 key(s) saved in your browser
localStorage keys: ballfin-pot · values not stored
E9
Uses the browser ability: clipboard_write
can copy text to your clipboard
ballfin.win/app.js @ 108:27 · “clipboard.writeText(” · pattern scan
E10
Uses the browser ability: local_storage
saves small bits of data in your browser
ballfin.win/app.js @ 157:24 · “localStorage.setItem(” · pattern scan
E11
Uses the browser ability: canvas
draws graphics on a canvas
ballfin.win/app.js @ 481:40 · “getContext("2d"” · pattern scan
E12
The page called /api/holders on ballfin.win (GET)
GET https://ballfin.win/api/holders · fetch · network recording
E13
The page called /api/fees on ballfin.win (GET)
GET https://ballfin.win/api/fees · fetch · network recording
E14
The page called /api/draw on ballfin.win (GET)
GET https://ballfin.win/api/draw · fetch · network recording
E15
The code names the endpoint /api
ballfin.win/app.js @ 42:76 · “/api” · pattern scan
E16
1 links to pages on the same site
page links · https://ballfin.win/ · /
E17
The site says: “…BALLFIN A weekly draw on Solana The GTA 6 lottery, now on-chain. Trading fees go into one pot. The more BALLFIN you ho…”
page text · https://ballfin.win/ · …BALLFIN A weekly draw on Solana The GTA 6 lottery, now on-chain. Trading fees go into one pot. The more BALLFIN you ho…
E18
The Internet Archive has no saved copy of ballfin.win
page web archive · https://web.archive.org/web/*/ballfin.win
E19
Agent step 1: view
AI agent step 1 · view on /
E20
Agent step 2: type Paste a Solana wallet address (not done: Blocked: we don't type into login, contact, payment or wallet fields.)
AI agent step 2 · type on /
E21
Agent step 3: click Check odds
AI agent step 3 · click on /
E22
Agent step 4: click Show top 50
AI agent step 4 · click on /
E23
Agent step 5: go /api/state
AI agent step 5 · go on /api/state

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id yHhnZd0j.