TRENCHCOAT
Website blueprint · 27 Oct 2026

scanitsol.fun

“SCAN IT — Scan a barcode, launch a meme coin”

Template-written 23 evidence items REA analysed 26 scripts
What this means for you

scanitsol.fun talked to 3 outside services on a first visit.E6E5E4

  • Tech check: the site claims wallet connection, and its public page shows matching evidence.E22E11E12E21
  • We saw no known analytics or advertising services load on the first visit.E1
  • 2 cookies were set in your browser, all by the site itself.E7E8
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E21

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“SCAN IT Scan & Launch 👑 KOTH 🏆 Challenges Connect wallet SCAN IT. LAUNCH IT. $SCAN Point your camera at a produ…”E22

Wallet libraries in its code: WalletConnect / Reown, PhantomE11E12

Wallet requests in its code: signTransaction, personal_sign, eth_requestAccountsE21E20E19

Calls its own backend /__l5e/trackevents, /_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74E15E16
Wallet code WalletConnect / Reown, PhantomE11E12E21E20
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The Internet Archive first saved this site on 2026-10-11 (16 days ago).E23
  • The site describes itself as: “Point your camera at any barcode or car VIN and launch a real Solana meme coin in seconds.”E2
  • It's built with React (common tools for building web apps).E9
  • Notable building blocks in its code: Supabase client.E10
  • In your browser it saves small bits of data in your browser.E13
  • It has sections such as /scan, /koth and /challenges.E18
  • While loading, it called 2 endpoints on its own servers, such as /__l5e/trackevents and /_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74.E15E16

Where your data goes

Backend & data servicesDatabases, search and APIs the app runs on. 1
nwxjqqdrmoirdkjiqfjq.supabase.coSupabase: app database and API 2×E6
FontsDownload typefaces. 2
fonts.gstatic.comGoogle Fonts: fonts 3×E5
fonts.googleapis.comGoogle Fonts: fonts 1×E4

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown and Phantom.E11E12
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E21
  • personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E20
  • eth_requestAccounts: asks to connect your wallet, which shows the site your address.E19

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E21

signTransaction

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Phantom, signTransaction, personal_sign and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E11E12E19

WalletConnect / ReownPhantomsignTransactionpersonal_signeth_requestAccounts

Loading its content

Its content loads from its own API while you browse (/__l5e/trackevents and /_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74).E15E16

/__l5e/trackevents/_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E13

local_storage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__dplE7scanitsol.fun about 1 daysthe site
__cf_bmE8scanitsol.fun about 0 daysthe site

Pages and API calls

Pages it links to

//scan/koth/challenges

Endpoints

Called while loading (seen) or named in the code (code).

scanitsol.fun/__l5e/trackeventsseenE15
scanitsol.fun/_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74seenE16
/api/broadcastcodeE17

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: SCAN IT — Scan a barcode, launch a meme coin
page title · https://scanitsol.fun/
E2
Page description: Point your camera at any barcode or car VIN and launch a real Solana meme coin in seconds.
page description · https://scanitsol.fun/
E3
30 request(s) to scanitsol.fun
types: 24 script, 3 fetch, 1 document
GET https://scanitsol.fun/ · script · 30 requests · network recording
E4
1 request(s) to fonts.googleapis.com
types: 1 stylesheet
GET https://fonts.googleapis.com/css2 · stylesheet · network recording
E5
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/bangers/v25/FeVQS0BTqb0h60ACH55Q2A.woff2 · font · 3 requests · network recording
E6
2 request(s) to nwxjqqdrmoirdkjiqfjq.supabase.co
types: 2 fetch
GET https://nwxjqqdrmoirdkjiqfjq.supabase.co/rest/v1/coins · fetch · 2 requests · network recording
E7
Cookie '__dpl' set for scanitsol.fun
kept for about 1 days
cookie __dpl on scanitsol.fun · value not stored
E8
Cookie '__cf_bm' set for scanitsol.fun
kept for about 0 days
cookie __cf_bm on scanitsol.fun · value not stored
E9
React detected by REA (react-runtime)
confidence: medium
scanitsol.fun/assets/WalletDialog-PeIhL_GG.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E10
Supabase client found in the code
scanitsol.fun/assets/client-CdtN7TW1.js @ 1:83 · “supabase-js” · pattern scan
E11
WalletConnect / Reown found in the code
scanitsol.fun/assets/transaction-DBqouAd-.js @ 1:353 · “WalletConnect” · pattern scan
E12
Phantom found in the code
scanitsol.fun/assets/WalletDialog-PeIhL_GG.js @ 4:46439 · “window.phantom” · pattern scan
E13
Uses the browser ability: local_storage
saves small bits of data in your browser
scanitsol.fun/assets/WalletDialog-PeIhL_GG.js @ 4:50527 · “localStorage.setItem(” · pattern scan
E14
Uses the browser ability: web_worker
runs work in a background thread
scanitsol.fun/assets/client-CdtN7TW1.js @ 7:6124 · “new Worker(” · pattern scan
E15
The page called /__l5e/trackevents on scanitsol.fun (POST)
POST https://scanitsol.fun/__l5e/trackevents · fetch · network recording
E16
The page called /_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74 on scanitsol.fun (GET)
GET https://scanitsol.fun/_serverFn/fe6c47c73d437aa4efd8ab957bf1212e0bbac44a25317d674a196c6a2d0aba74 · fetch · network recording
E17
The code names the endpoint /api/broadcast
scanitsol.fun/assets/client-CdtN7TW1.js @ 1:26772 · “/api/broadcast” · pattern scan
E18
4 links to pages on the same site
page links · https://scanitsol.fun/ · /, /scan, /koth, /challenges
E19
Wallet request in code: eth_requestAccounts
asks to connect your wallet, which shows the site your address
scanitsol.fun/assets/client-CdtN7TW1.js @ 10:23282 · “eth_requestAccounts” · pattern scan
E20
Wallet request in code: personal_sign
asks you to sign a text message (often to log in; moves no funds by itself)
scanitsol.fun/assets/client-CdtN7TW1.js @ 10:24003 · “personal_sign” · pattern scan
E21
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
scanitsol.fun/assets/WalletDialog-PeIhL_GG.js @ 4:45416 · “signTransaction” · pattern scan
E22
The site says: “SCAN IT Scan & Launch 👑 KOTH 🏆 Challenges Connect wallet SCAN IT. LAUNCH IT. $SCAN Point your camera at a produ…”
page text · https://scanitsol.fun/ · SCAN IT Scan & Launch 👑 KOTH 🏆 Challenges Connect wallet SCAN IT. LAUNCH IT. $SCAN Point your camera at a produ…
E23
The Internet Archive first saved scanitsol.fun on 2026-10-11 and has snapshots from 2 different days
page web archive · https://web.archive.org/web/20261011125402/scanitsol.fun

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 24 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id R3MkLXKD.