Is mint-os.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

MINT OS is a single-page Solana memecoin trading workspace. It presents wallet analytics, a live token-discovery panel and an "autopilot" that trades a user-defined SOL budget under chosen risk profiles, with a "Connect wallet" call to action. The page describes itself as an interactive design preview. It appears to be a crypto trading-tool landing page whose monetisation and fund flow are not stated anywhere on it. The site's identity could not be independently connected to a real-world brand or person (identity status: unverified, low confidence), so this description reflects only what the page itself shows.

Scam/Impersonation Risk

No brand impersonation, conflicting legal identities, phishing behaviour or confirmed adverse listing were observed, and the page has no login or data-collection forms. The risk comes from the combination of a very new domain and a financial proposition with no identifiable accountable party. One third-party reputation source has flagged the domain, but it is not specified which source or what it detected. This is a soft third-party warning and reputation note, not a confirmed listing. The lack of detail and the lack of corroboration reduce its weight. It still matters here because nothing observed offsets it. The homepage invites visitors to connect a wallet and hand an autopilot a SOL budget, under the slogan "Your limits. Your control." The same page admits that "losses can exceed intended limits during execution", so the control claim is contradicted by its own disclaimer. The discovery panel showcases a token with a 24-hour gain of over 15,000% next to others down roughly 94–95%, alongside obscure memecoins such as CATONICE, Doomsday, Echo, Groklet and CBUCKS. It also notes that discovery includes "boosted" tokens. This presentation normalises extreme volatility and could steer users toward promoted, illiquid assets. The site discloses no custody model, no fee structure and no description of how the autopilot's risk controls work. Its stated functionality is a design preview that requires JavaScript, so the product could not be shown to operate as described. Together these form an opaque value flow in which users would be asked to commit funds to a mechanism they cannot inspect. Evidence:

• Homepage: the autopilot and "Connect wallet" prompts ask for a SOL budget, while the footer states that losses can exceed intended limits and no risk profile guarantees returns.
• Homepage: the market snapshot lists a token up 15,316% in 24 hours alongside several tokens down about 94–95%, and says discovery includes boosted tokens.
• Domain registration: registered 2026-09-23 (~0.07 years, about 25 days old) through NICENIC International Group Co., Limited, with registration running to 2027-09-23.
• One external reputation source flags the domain as a soft warning. The source and detection details are unspecified, and no corroborating confirmed listing exists, so it is treated as a reputation note and not as proof of wrongdoing.

Regulatory Verification Notes

The site has no legal, terms, privacy or about pages. It names no operating company and publishes no registered address, licence or registration number, and it makes no regulatory claim of any kind. For a product that proposes to trade user funds automatically, this leaves no identifiable accountable operator and the legal status unverifiable. Identity could not be independently connected to any real-world person or business (unverified, low confidence), so the evidence is consistent with an unknown entity and does not support any conclusion about who runs the site or whether it is legitimate. The registration data also gives no usable ownership information. No third-party broker or regulator record matches the site. The only outside signal is the soft, unspecified reputation warning described above, so there is little external context in either direction. Evidence:

• Homepage: no operator name, legal entity, jurisdiction, licence reference or physical address appears, and no policy pages are linked.
• Homepage: no pricing, fee schedule or custody description accompanies the autopilot feature.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (DV, domain validation only), valid to 2026-12-22, which confirms an encrypted connection but nothing about the operator.

What to Verify Next

Before any wallet connection, the operator should be established through independent channels. That means a named legal entity, a jurisdiction and, where a trading or custody service is offered, evidence of the relevant financial-services authorisation checked directly with the regulator's own register. Any official contact channels should be confirmed outside the site itself. The autopilot should be shown to work as described, with documentation of whether it is custodial or non-custodial, which permissions the wallet connection requests, how fees are taken and what limits are actually enforced on-chain. Any claimed audit or team should be confirmed from sources independent of this domain. The source and nature of the third-party reputation warning should also be clarified. Evidence:

• Homepage: the product is labelled an interactive design preview, so live functionality is unconfirmed.
• Homepage: the "Your limits. Your control." claim has no supporting documentation.
• Domain registration: the domain is weeks old and has no track record of its own.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary posture. The site is a newly created crypto trading proposition whose operator could not be identified. It asks for financial access while offering no accountability or verifiable controls. It is not demonstrably a scam, but nothing observed offsets the unresolved soft reputation warning and the structural opacity. It is unsuitable for any sensitive or financial interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF with bot protection. All observed addresses are edge servers, and the origin was not observable. The infrastructure is mainstream and the certificate is valid, so this is a mitigating factor for transport security and availability. It says nothing about who operates the site or whether the service is honest. The edge-only view also prevents independent hosting verification and would let the underlying content change without visible infrastructure signals.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected, no funds or SOL budget allocated, and no credentials or personal details entered until an accountable operator has been independently established.