Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
revenuefriends.com shows high-risk / scam indicators.
| What this site appears to be | Revenue offers to convert dollars sent via X Money to @RevenuePay into USDC, USDT, SOL or ETH in a user's wallet, charging 2% plus $0.50. Orders are paid to a single personal handle and fulfilled manually, and the page adds a locked $20–$600 welcome bonus, invite-counting member cards, a $REV token snapshot, and a scrolling feed of large payouts. No legal entity, licence, custody terms, or verifiable address is shown, so the high-stakes payment and sign-in flows have significant evidence gaps. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2.2 years oldRegistered history | Clear |
| Web archive | Archived since 20214 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2021.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as "Revenue", a crypto cash-out service that converts dollars sent through X Money to a single payment handle into USDC, USDT, SOL or ETH delivered to a wallet the visitor supplies. The homepage offers an order form with a stated fee of 2% plus $0.50 per order and a "Sign in with X" flow. It also shows a locked welcome bonus, invite-counting member cards, a $REV token snapshot and a scrolling feed of payout notifications. Its apparent business model is a fee-based, manually fulfilled payment bridge with a referral and token-promotion layer.
Scam/Impersonation Risk
Contradictory signals are present, and this section carries the most weight in the assessment. An external security assessment currently flags the domain as blacklisted, which is a confirmed adverse reputation signal. Beyond that, the homepage's own content conflicts with itself. The payout feed is headed "Money payouts · opening soon", yet it scrolls a stream of completed-looking payments to large sums such as $18,000, $12,500 and $9,500, each tagged with an order reference. These notifications rotate automatically with no verifiable source, which makes them unverifiable social proof rather than evidence of real payouts. The order flow requires the customer to send money first. Customers pay a personal-style handle on a third-party payment network, and the crypto is then fulfilled manually. The page offers no escrow, no custody terms and no independent payout record. The swap widget accepts up to $20,000 per order. A "welcome bonus" of $20–$600 is shown as locked until a date with no stated basis, and the invite program counts everyone who joins through a member's link. Together with the $REV token snapshot, this is a referral-and-incentive structure that is common in extraction schemes. The homepage's single form combines a payment order, wallet-address entry and social sign-in, and its destination is untrusted. No impersonation of a known brand was detected. The risk therefore comes from the blacklist hit and the structure of the payment flow, not from copying another company.
- Homepage: the payout feed is labelled "opening soon" while displaying rotating payouts of up to $18,000, which is internally contradictory.
- Homepage: the swap widget takes up to $20,000 per order and pays to a single personal handle, with a quoted fee of $20.50 on a $1,000 order.
- Homepage: the locked $20–$600 welcome bonus, invite-counting cards and $REV snapshot form a referral and token-promotion tier.
- Domain provenance: registered 2026-10-04 (about 15 days old), while only 4 archive snapshots exist, spanning 2021–2026 (6 years tracked), so no continuous operating history is established.
Regulatory Verification Notes
The site shows no legal entity name, licence or registration number. It also gives no custody terms, company address or other verifiable contact detail. For a service that takes customer funds and converts them into digital assets, this is a significant disclosure gap. It sits alongside ownership opacity, as the domain registration carries incomplete owner details. Registration privacy alone would be an administrative matter, but here it adds to a picture in which no accountable operator can be identified. No third-party broker or regulator record matched this site, so there is no external reputational context either way. The site's claims of tracked, completed orders therefore rest solely on its own unsupported statements.
- Homepage: no legal entity, licence, custody terms or physical address is displayed anywhere on the page.
- Registration: registrar is NICENIC International Group Co., Limited, with a 2026-10-04 creation date, 2027-10-04 expiry, and incomplete owner details.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by YE2 at domain-validation (DV) level only, valid to 2027-01-02, which confirms encryption but not operator identity.
What to Verify Next
The practical priority is to avoid funding any order until the operator can be independently established. Confirm through an official registry whether any legal entity operating under this brand holds a money-transmission or virtual-asset service licence in the user's jurisdiction. Test whether the X account that receives the payments is a verified business account with a long, independent history. Check the official support and community channels through an independent route, not through links on the site itself. Separately, assess whether any independent party has documented a completed payout, since the on-page feed cannot serve as proof.
- Homepage: all payments are directed to one X handle, so that account's history is the only checkable counterparty.
- Homepage: the only outbound social reference is a Telegram channel, which is self-published and not independent confirmation.
- Registration: the domain was registered about 15 days before analysis, so an independent track record would need to come from outside the site.
Summary Verdict
The overall posture is a critical, high-risk assessment. A confirmed adverse external signal combines with a payment-first, custodial flow that lacks any verifiable accountability. The site's polish and clean on-page behaviour do not offset these structural problems. The available evidence does not support treating this site as legitimate for financial interaction.
Infrastructure Integrity
The site is served through Cloudflare's CDN and web application firewall, and all observed addresses are edge servers, so the origin host was not observable. This is a modest mitigating factor, because it indicates standard commodity hosting and a valid certificate. It does not speak to the operator's legitimacy. The edge-only visibility also prevents independent hosting verification and can mask rapid content changes. A heuristic notes a young domain with sparse subdomains, which is consistent with a newly launched property and is unconfirmed as a risk on its own.
Closing Assessment
Treat the site as read-only at most. Do not sign in with X, connect a wallet, submit a wallet address or send any funds through it. Anyone who has already paid or signed in should secure their X account, review its connected apps and keep a record of the order references.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, several checks together.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- A form on the page submits to a destination TrustSniffer could not verify.Page content
rule:PAGE_FORM_UNTRUSTED_DEST - The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of revenuefriends.com.
- The request stayed on revenuefriends.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-04. Noted
- The earliest public archive of this site is from 2021-12-21. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:5c92 |
| Name servers | BRYCE.NS.CLOUDFLARE.COM, GAIL.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-02 |
| Domain age | 2.18 years (continuous registration) |
| Domain expiry | 2027-10-04 |
| Archive first seen | 2021-12-21 |
| Archive snapshots | 4 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about revenuefriends.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.