Is sunrise-mint.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Sunrise Mint is a newly registered website that presents itself as a "canonical minting protocol" for tokenized stocks, ETFs, commodities and bonds. Its homepage shows a USDC-funded minting widget, a wallet-connection gate and a ticker of price-quoted tokens such as cAAPL, cTSLA, cNVDA, cSPY and cGOLD. Its apparent business model is to take USDC deposits in exchange for on-chain tokens described as 1:1 backed by off-chain assets, with fee income shared among SRMINT stakers, a treasury and oracle operators.

Scam/Impersonation Risk

The evidence shows confirmed contradictions and supports a clearly cautionary assessment. Several major security vendors currently flag the domain as malicious, and an external blacklist hit is confirmed, so this is a blacklisted site, not merely one with a soft reputational concern. No brand impersonation, conflicting legal identities or credential-phishing form were observed, but the blacklisting is decisive on its own. The homepage compounds it with a high-stakes claim set that it does not support. It advertises "$4.8B Total Assets Minted", "840K Unique Minters", "1,240+ Canonical Assets", a "1:1 Backing Ratio · Always" and "1:1 Custodial · Verified" backing. These are headline figures with no named custodian, audit report, proof-of-reserve link or issuer behind them. The site also promises dividend pass-through, staking yield and DeFi yield on a 0.10% mint and redeem fee and a $0.50 bridge fee. Users must deposit USDC before receiving any service, and the page describes custody of the underlying assets as off-chain and unverifiable. In this pattern, impressive scale claims and "verified" labels are the main lure. A domain only a few months old cannot plausibly have accumulated hundreds of thousands of minters and billions in minted assets. Evidence:

• Homepage: scale counters ("$4.8B", "840K", "1,240+") and the "1:1 Custodial · Verified" label appear with no linked attestation, custodian name or audit.
• Homepage: a single financial-amount input in USDC sits behind a "Connect Wallet to Mint" gate, with eleven named tokens including SRMINT and the cAAPL/cTSLA/cGOLD series.
• Domain registered 2026-07-31 (~0.22 years, ~82 days old); the web archive holds 1 snapshot, captured 2026-08-05, with no prior history.
• Third-party detections: 11 malicious and 2 suspicious verdicts from the multi-vendor reputation check, with three tier-one security vendors among them.

Regulatory Verification Notes

The site presents what is effectively a securities-linked product (tokenized equities, ETFs and bonds, with dividend pass-through) but names no legal entity, licence, regulator, custodian or physical address. This is a content gap on the site itself, and no third-party regulatory or broker record was matched. The page references "licensed custodians", audits and proof-of-reserve attestations without giving any licence identifier or verifiable link. Without a named issuer or regulated custodian, there is no accountable party to enforce the claimed backing, redemption or dividend rights. The absence of disclosure is not the finding here. The finding is that the site makes regulatory-sounding assurances it does not substantiate, in a context where the reputation evidence is already adverse. Real-world operator identity remains unverified. Evidence:

• Homepage: backing, audit and "licensed custodian" assertions appear without any licence number, regulator name or legal entity.
• Homepage: no postal address or verifiable corporate contact is published.
• Registration through the registrar Atak Domain, with a generic "Domain Administrator" registrant label.
• Served from AS13335 (Cloudflare); TLS certificate issued by WE1 at DV level, valid to 2026-12-27. A DV certificate confirms only control of the domain, not the identity of the operator.

What to Verify Next

Before any engagement, the claimed asset backing needs independent confirmation outside the site. That means identifying the custodian and legal issuer through a regulator's public register or a verifiable corporate filing, not through links on the site. The SRMINT token and the cToken contracts should be checked on a blockchain explorer for supply, holder distribution and admin or mint privileges, and compared against the advertised issuance. Any audit or proof-of-reserve claim should be confirmed directly with the named auditor via an independently sourced channel. Official support and contact channels should be established through an offline or independently verified route. Evidence:

• Homepage: the claimed "Pyth Network" oracle pricing and "24/7 · No lock-up" redemption cannot be confirmed from the page alone.
• Homepage: the SRMINT DAO and fee-sharing structure names no governing entity or treasury address.
• The domain is not recognized in any DeFi protocol directory.

Summary Verdict

Sunrise Mint carries an elevated, high-risk posture. A confirmed blacklist hit and strong adverse reputation signals converge with a very young domain and a financial deposit model whose central claims are unsupported. The apparent polish and rich content do not offset these findings.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF, and all four observed addresses are edge servers, so the origin host was not observable. This protection and the valid TLS certificate are mitigating signals only. They show competent deployment but give no assurance about who operates the site, and they cannot offset the adverse reputation evidence. A young domain with sparse subdomains is consistent with the rest of the profile, though this is an unconfirmed heuristic.

Closing Assessment

Treat the site as unsafe for any financial or credential interaction. Do not connect a wallet, approve token spending or deposit USDC. Passive, read-only viewing is the most that is appropriate. Anyone who has already interacted with it should revoke wallet approvals and move remaining funds to a fresh wallet.