I can assure you, it is a false-positive.

But I setup a new compiling machine that uses MXE instead of a native Windows machine.
Can you try to order a new free coin and test if you still have the same detection ?