Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
revenuedet.xyz shows high-risk / scam indicators.
| What this site appears to be | Revenue is a service that accepts dollar payments sent through X Money to the account @RevenuePay and sends crypto (USDC, USDT, SOL, ETH) to users' wallets. The page requires users to sign in with X, enter a wallet address, and pay before coins are sent. It holds user balances, offers locked welcome bonuses, and runs a referral 'Invites' program. It shows a live feed of large payout notifications that cannot be verified, and it provides no verifiable legal entity, licence, company address, or audit. It also states it is 'Not affiliated with X Corp.' The page's own timeline is inconsistent: the bonus lock is said to lift on October 4... |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Revenue is a crypto cash-out landing page that presents a transaction widget for converting US dollars sent through X Money into USDC, USDT, SOL or ETH delivered to a user-supplied wallet. The visitor is asked to sign in with X, paste a wallet address, and pay a personal X handle (@RevenuePay) in exchange for crypto. The page also offers locked welcome bonuses, a referral "Invites" program, and promotion of a $REV token. Its apparent business model is a fee-based (2% plus $0.50) fiat-to-crypto conversion and custodial balance service.
Scam/Impersonation Risk
Confirmed contradictions are present, and the overall picture is one of elevated, active risk. The domain appears on third-party blacklists, including a flag from a major security vendor, and the page analysis rates the service as critical. No brand impersonation and no conflicting legal identities were observed. The risk arises from the mechanics of the offer. The homepage requires payment to an individual X account before any crypto is released, with no escrow or verifiable counterparty. Its single form collects a payment amount and a wallet address and routes them to an untrusted destination. The page states payouts are handled manually and that user balances are held as "Revenue balances". It also advertises welcome bonuses of $20 to $600 that remain locked and payable later. Together these terms give the operator custody and discretion over user funds. The live "payout notifications" feed adds to the concern. It scrolls payments of $900 to $18,000 every few seconds, while the same widget says money payouts are "opening soon". Because the feed cannot be reconciled with that statement, it reads as manufactured social proof rather than real activity. The page's timeline is also inconsistent. The bonus lock is said to lift on October 4, 2026, which is a day before the domain was registered and more than two weeks before the analysis date. The disclaimer "Not affiliated with X Corp." confirms the service operates through a third-party platform it does not control, and gives users no recourse if the handle is suspended or abandoned. Evidence:
- Homepage: the transaction widget accepts up to $20,000 per swap and instructs payment to @RevenuePay before any coins are sent.
- Homepage: the payout feed shows large unattributed payments while the same widget says payouts are "opening soon".
- Homepage: the bonus lock date of October 4, 2026 precedes the domain's registration; domain registered 2026-10-05 (~15 days old).
- Web archive: 3 snapshots only, from 2026-10-05 to 2026-10-13, showing no established history.
Regulatory Verification Notes
The site presents no legal entity name, licence or registration number, company address, or audit. It has no terms, privacy or about page that could anchor an operator identity. This is a verification gap, but it is not the basis of the adverse conclusion above. The gap matters more because the service takes custody of funds and moves value across crypto networks, activities that normally require identifiable, supervised operators. Registrant details are incomplete, which amounts to ownership opacity rather than an identity contradiction. No third-party broker-reputation database entry was matched, so no regulatory or broker-level signal is available either way. Evidence:
- Homepage: no company name, licence authority, licence number, registered address or audit report is disclosed.
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, registration expiring 2027-10-05.
- TLS certificate issued by YE1 (domain-validated, DV), valid to 2027-01-03, which confirms encryption but not operator identity.
- Hosted on AS13335 (Cloudflare, Inc., US).
What to Verify Next
Before any interaction, the operator's existence should be established independently of the site. That means confirming through the relevant financial or money-services registry whether any licensed entity trades under this name or operates the @RevenuePay handle. Account age, ownership and activity history for that X handle should be checked directly on the platform, since the handle is the only counterparty. Evidence that any user has actually received a payout, from sources the operator does not control, should be sought. The official support channel should be confirmed through an independent route rather than through links on the page itself. The only visible contact route is a Telegram link, which is not an adequate substitute for a verifiable corporate contact. Evidence:
- Homepage: the only outbound social link is a Telegram channel; no company contact page is offered.
- Homepage navigation lists "Docs", "Analytics" and "Capital Flow" sections, but no legal or support page is exposed on the analysed page.
- Homepage: the stated manual payout process and locked balances cannot be corroborated by any independent source.
Summary Verdict
The available evidence points to a high-risk, untrustworthy website. Blacklisting by external reputation sources, a deposit-first custodial model with no accountable operator, and a freshly created domain converge on a cautionary conclusion. The technical hygiene of the site does not offset these deficiencies.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge nodes, so the origin server is not visible. Valid encryption and a mainstream edge provider are mitigating factors only. They show the site is technically configured, not that its operator is legitimate. Edge-only visibility also prevents independent hosting verification and can mask rapid content changes. The infrastructure cannot offset the reputational findings.
Closing Assessment
The site should not be used for account sign-in, wallet connection or payment of any amount, and read-only viewing is the only appropriate interaction. Anyone who has already sent funds or connected a wallet should stop further transfers, revoke any wallet permissions granted, and report the payment to their bank or payment provider and to the X platform.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, several checks together.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- A form on the page submits to a destination TrustSniffer could not verify.Page content
rule:PAGE_FORM_UNTRUSTED_DEST - The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of revenuedet.xyz.
- The request stayed on revenuedet.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-05. Noted
- The earliest public archive of this site is from 2026-10-05. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::ac43:8684 |
| Name servers | AUSTIN.NS.CLOUDFLARE.COM, JOSEPHINE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-03 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-05 |
| Archive first seen | 2026-10-05 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about revenuedet.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.