What this means for you
Website report · 19 Oct 2026
munk.win
“MUNK — 100,000 MUNK Community Airdrop”
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
What it is
- The site describes itself as: “Apply for the 100,000 MUNK community airdrop. Follow MUNK on X, join Telegram, comment on the campaign post, and submit your Solana address.”E2
- It's built with React (common tools for building web apps).E7
- Notable building blocks in its code: Supabase client.E8
- In your browser it saves small bits of data in your browser.E9
- While loading, it called 1 endpoint on its own servers, such as /__l5e/trackevents.E11
Where your data goes
On a first visit the page only talked to its own servers (munk.win).
Crypto and wallets
How key features work
Connecting your wallet
It connects to crypto wallets using personal_sign and eth_requestAccounts. Connecting shows the site your wallet address; it doesn't move funds by itself.E13
personal_signeth_requestAccountsLoading its content
Its content loads from its own API while you browse (/__l5e/trackevents).E11
/__l5e/trackeventsSaving data on your device
It saves data in your browser (localStorage), so some things persist between visits.E9
local_storageCookies and storage
Names only. We never store the values.
Pages and API calls
Evidence
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Page title: MUNK — 100,000 MUNK Community Airdrop
page title · https://munk.win/
E2
Page description: Apply for the 100,000 MUNK community airdrop. Follow MUNK on X, join Telegram, comment on the campaign post, and submit your Solana address.
page description · https://munk.win/
E3
Main heading: 100,000 MUNK.
page h1 · https://munk.win/
E4
10 request(s) to munk.win
types: 5 script, 1 document, 1 image
GET https://munk.win/ · script · 10 requests · network recording
E5
Cookie '__dpl' set for munk.win
kept for about 1 days
cookie __dpl on munk.win · value not stored
E6
Cookie '__cf_bm' set for munk.win
kept for about 0 days
cookie __cf_bm on munk.win · value not stored
E7
React detected by The code reader (react-runtime)
confidence: medium
munk.win/assets/index-D6aELXkK.js · “react-runtime” · The code reader analyze-web-bundle 6.4.0
E8
Supabase client found in the code
munk.win/assets/index-D6aELXkK.js @ 13:58274 · “supabase-js” · pattern scan
E9
Uses the browser ability: local_storage
saves small bits of data in your browser
munk.win/assets/index-D6aELXkK.js @ 20:2497 · “localStorage.setItem(” · pattern scan
E10
Uses the browser ability: web_worker
runs work in a background thread
munk.win/assets/index-D6aELXkK.js @ 19:6124 · “new Worker(” · pattern scan
E11
The page called /__l5e/trackevents on munk.win (POST)
POST https://munk.win/__l5e/trackevents · fetch · network recording
E12
The code names the endpoint /api/broadcast
munk.win/assets/index-D6aELXkK.js @ 13:85635 · “/api/broadcast” · pattern scan
E13
Wallet request in code: eth_requestAccounts
asks to connect your wallet, which shows the site your address
munk.win/assets/index-D6aELXkK.js @ 22:23332 · “eth_requestAccounts” · pattern scan
E14
Wallet request in code: personal_sign
asks you to sign a text message (often to log in; moves no funds by itself)
munk.win/assets/index-D6aELXkK.js @ 22:24053 · “personal_sign” · pattern scan
E15
The site says: “…lana address. Claim 100,000 MUNK Free application · No wallet connection Allocation 100,000 MUNK Network Solana Participatio…”
page text · https://munk.win/ · …lana address. Claim 100,000 MUNK Free application · No wallet connection Allocation 100,000 MUNK Network Solana Participatio…
Limits
- We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
- Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
- Some trackers only load after you accept cookies or log in, so the real list can be longer.
- We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
- The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
- This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
- The code reader hit its size budget on parts of 2 large bundle file(s); those parts weren't fully analysed.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id ndJmAnWT.