Is mintpwt.im safe? TrustSniffer's low-trust assessment: 33/100

Overview

The website at mintpwt.im is a newly launched, minimally populated web property whose homepage carries the title "PWT" and only a few characters of visible text. It offers no readable description of products, services, or a business model, so its purpose cannot be established from its own content. The page loads normally, and its scripts make a notable number of requests to external services.

Scam/Impersonation Risk

Contradictory signals are present, and they set the risk posture for this assessment. The domain appears on an external blacklist maintained by third-party reputation sources. Within that screening, one security engine rated the domain malicious and another rated it suspicious. Archive-derived intelligence also carries a known-phishing association for the domain. No conflicting legal entities or confirmed brand impersonation were observed, and the sandbox found no wallet-draining behavior, clipboard hijacking, hidden forms, cloaking, or credential posts to external hosts. A wallet provider was detected on the page, however. A blank, brand-less front page paired with a blacklist listing, wallet-related scripting, and a domain only weeks old matches the profile of a disposable or staging property, which the page's own content does nothing to dispel. The homepage does not explain who operates the site or why it exists, so no benign explanation is available. Nothing in the evidence suggests an established operator behind the site. Evidence:

• Homepage: the page title is "PWT" and the visible text is about nine characters, with no products, company name, or contact details.
• Domain registered in September 2026 (~34 days old); the first of 3 archive snapshots is dated 2026-09-18 and the last 2026-09-25 (1 year tracked).
• Reputation screening: 1 engine reports malicious and 1 reports suspicious, which triggered the blacklist listing.
• Behavioral sandbox (3 of 3 runs successful): 13 external XHR requests and 4 external POSTs, none to non-whitelisted destinations, and a wallet provider detected on the page.

Regulatory Verification Notes

No legal, terms, privacy, or about content is present, so no licensing status, registered entity, or regulator reference can be assessed. Ownership is also opaque, with registration details incomplete. Given the confirmed blacklist signal, these omissions are not merely administrative: they leave no identifiable accountable party. No third-party broker or regulatory-database record matches the domain, and no regulatory standing is established. Evidence:

• Homepage: no legal entity name, license number, registration reference, or jurisdiction is published.
• Identity verification could not connect the domain to any real-world brand or person.
• Served from AS13335 (Cloudflare, Inc., US); the TLS certificate was issued by YE2 (DV) and is valid to 2026-12-17, with domain registration running to 2027-09.
• No match in the broker-reputation dataset.

What to Verify Next

Any prospective interaction should wait until the operator is identified through an independent route and the blacklist listing is cleared. Specifically, the site's claimed purpose should be established through an offline or out-of-band contact with a named organization. Whether the listing was raised against this domain's own content or a mistaken association should be checked through the listing sources. Any entity claiming to operate the site should be confirmed in the relevant corporate and regulatory registries. A wallet connection should not be attempted until this is done. Evidence:

• The homepage names no operator, so there is nothing yet to check in a registry.
• The wallet-provider detection indicates asset-related functionality that the page itself does not explain.
• The blacklist listing and the one malicious and one suspicious engine detection remain unresolved.

Summary Verdict

The overall posture is high-risk. A confirmed blacklist signal is combined with a very young domain, a near-empty front page, and no identifiable operator. These factors outweigh the technically orderly setup, which is not evidence of legitimacy. The site is not established as legitimate, and sensitive use is not supported.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF. Every observed address is a CDN edge node and the origin server is not observable, so independent hosting verification is not possible and content can be swapped quickly behind the edge. The site presents a valid DV certificate and a clean shared-infrastructure record, which are mitigating factors only. They cannot offset the reputation risk.

Closing Assessment

Use should be limited to passive viewing at most. Logins, credential entry, wallet connections, and any payment or financial interaction should be avoided until the operator is identified and the blacklist listing is resolved.