Is remittix.info a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Remittix.info is a single-page cryptocurrency payments website presenting itself as a "Crypto-to-Fiat Network" under a "PayFi" banner. It positions itself as a bridge between digital assets and conventional currency for remittance-style payments, so its apparent business model is the conversion and transfer of value between crypto holdings and fiat money.

Scam/Impersonation Risk

This is the decisive section of the assessment. The domain is currently flagged as malicious by a substantial number of independent security vendors, including several tier-one endpoint and network security providers, and the combined detections amount to a confirmed blacklisting. A prior phishing association is also recorded against the domain. Reputation at this level overrides every mitigating technical factor. The site's valid encryption, mainstream hosting and clean behavioural profile in automated testing do not offset it. No conflicting legal entities and no brand impersonation were identified on the pages themselves, so the risk comes from external threat intelligence, not from contradictory on-page identity claims. The homepage offers financial-sounding functionality that depends on trust: crypto-to-fiat conversion and payment settlement. Operators of phishing and fund-diversion schemes commonly use this kind of proposition. The domain is also very young, which fits the pattern of short-lived campaign infrastructure, although age alone proves nothing. In automated sessions the site did not trigger a wallet-connection prompt, wallet-drainer behaviour, clipboard manipulation, hidden forms or credential posts to external parties. That is a positive observation. It does not neutralise the external detections, because malicious content can be swapped in after the site has been assessed as benign. Evidence:

• Homepage and domain-level reputation: multiple major security vendors currently flag the domain as malicious, and a reputation-based kill condition is active.
• Domain registered 2026-06-30 (~0.32 years old, about four months), via NICENIC INTERNATIONAL GROUP CO., LIMITED, expiring 2027-06-30.
• Web archive: 10 snapshots spanning 2025–2026 (2 years tracked), a thin and recent history with no established record behind it.
• Homepage behaviour: the sandbox showed a high share of requests going to third-party hosts, with no wallet-connect, drainer, clipboard-hijack or hidden-form activity across three successful runs.

Regulatory Verification Notes

The homepage describes a payments and currency-conversion service but gives no clear legal entity, licence or registration disclosure, so the site's regulatory standing cannot be inferred from its own content. Services that move value between crypto and fiat typically fall under money-transmission or virtual-asset service provider regimes, which makes that omission material. Ownership of the domain is also not transparent, and no governance information connects the site to an accountable operator. No third-party broker or regulatory-watchlist entry matched this site. That absence is neutral and does not indicate any authorisation. Identity has not been independently connected to any real-world brand or person, so no legitimacy should be inferred from the site's name or presentation. Evidence:

• Homepage: titled as a crypto-to-fiat PayFi network, with no verifiable operator identity, licence or registration number disclosed.
• Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US), which indicates only where the content is delivered from and gives no information about the operator.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-24. This confirms encryption but not organisational identity.
• No match was found in the third-party broker reputation dataset.

What to Verify Next

Before any engagement, anyone considering this site should independently establish whether the project it claims to represent actually operates this domain. That means finding the project's official address through channels the site does not control, such as an established exchange listing or a verified social presence reached by independent search, and comparing it with this domain. If the operator claims to provide payment or conversion services, its authorisation should be checked directly in the relevant financial regulator's public register, and any listed contact route should be confirmed offline. Until those checks succeed, the site should be treated as unverified and never used as the reference for its own legitimacy. Evidence:

• Homepage: no regulator, licence or registration reference is provided to check against.
• Domain registration: the domain is only months old, so a prior identity cannot be assumed from its history.
• Reputation: active security-vendor detections are recorded against the domain and should be re-checked for status changes.

Summary Verdict

The overall posture is high risk. The convergence of confirmed external threat detections, a prior phishing association, a very young domain and an unidentified operator outweighs the technical hygiene the site shows. The assessment is cautionary and security-forward. The site is not treated as safe for any transactional or credentialed purpose.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host cannot be seen. Edge-only visibility prevents independent verification of where the content is actually hosted. It can also mask rapid content changes behind a stable front. The protection is a mitigating factor for availability and transport security only. It does not offset the reputation findings, and it is not evidence of legitimacy.

Closing Assessment

Prospective users should not log in, enter credentials, connect a wallet or send funds through this site. At most, it may be viewed passively in a hardened, isolated browser environment. Anyone who has already interacted with it should change reused passwords and review any wallet approvals or payments made.