Is revenuefull.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Revenuefull.xyz is a single-page crypto cash-out service branded "Revenue". It invites visitors to sign in with X, send US dollars through X Money to a personal handle, @RevenuePay, and paste a wallet address to receive USDC, USDT, SOL or ETH. The page presents a swap widget with a stated limit of up to $20,000 per order, a "$REV" token snapshot banner, a member-number and invite-code referral card, and a locked welcome-bonus balance. Its apparent business model is a fiat-to-crypto conversion intermediary that earns a stated fee of 2% plus $0.50 per order.

Scam/Impersonation Risk

The assessment is clearly cautionary, and contradictory signals are present. An external threat-intelligence listing currently flags the domain, and the site matches a confirmed blacklist condition. This is reinforced by a run of content-level red flags on the homepage. The core flow is deposit-before-service. The user must pay dollars to an individual's X handle, not to a named company, before anything is delivered. The service then takes custodial control of the value flow, and the page gives no way to verify it independently. The homepage's own numbers do not reconcile. A worked example shows a $20 order with a $20.50 fee, yet the page reports 979.50 USDC received. The "Payout notifications" ticker scrolls payouts of $18,000, $9,500 and $12,500 at second-level intervals, while the same panel is labelled "opening soon". This is consistent with fabricated social proof, not real transaction data. The locked welcome bonus of $20 to $600 has a withdrawal date of October 4, 2026, which has already passed. No source of funding is given, and the bonus works as a guaranteed-return lure. The referral card ties each member's invite count to a personal code, which encourages recruitment before any payout has been demonstrated. No contradictory legal identities and no confirmed brand impersonation were found. However, the page uses X sign-in and X Money branding while disclaiming any affiliation with X Corp, which borrows the credibility of a recognised platform. Evidence:

• Homepage swap widget: a $20 order with a $20.50 fee shows 979.50 USDC received, an arithmetic impossibility.
• Homepage payout ticker: unverifiable payouts from $900 to $18,000 under an "opening soon" label.
• Homepage bonus card: a locked $20–$600 bonus whose stated unlock date of October 4, 2026 has already passed.
• Domain registered 2026-10-06 (~0.04 years old); 5 archive snapshots spanning 2026-10-06 to 2026-10-14 (about one year tracked, but only days of real history).

Regulatory Verification Notes

The homepage names no legal entity and no licence or registration number. It also gives no postal address, independent audit, or terms and privacy pages that would identify an operator. The only contact route is a Telegram channel, and the payment destination is an individual X handle. Together these leave the real-world operator unidentified and ownership opaque. For a service that holds customer funds and moves them across chains, this level of governance opacity is a serious gap, not an administrative detail. No third-party broker or regulator record matched this brand, so no reputational context is available. The domain is registered through NICENIC International Group Co., Limited. The site uses a basic domain-validated certificate, which proves control of the domain and says nothing about the operator. Evidence:

• Homepage: no company name, licence authority, licence number or physical address is shown; the only external link is a Telegram channel.
• Served from AS13335 (Cloudflare, Inc., US); registrar NICENIC International Group Co., Limited; registration expires 2027-10-06.
• TLS certificate issued by YE2 (DV), valid to 2027-01-04.

What to Verify Next

Any prospective user should first establish who operates the service. That means finding a registered legal entity and a financial-services or money-transmission licence in the relevant jurisdiction, and checking it directly with the regulator's own public registry. The ownership of the @RevenuePay account should be checked through the platform's official channels, since the site's own claims cannot serve as proof. The bonus, payout and fee claims should be compared against independent evidence of completed customer payouts, such as verifiable on-chain transactions with traceable counterparties. Any official support channel should be confirmed through an independent, offline route and not through links on the page. Evidence:

• Homepage FAQ and fee panel: the payment-matching and fee claims cannot be checked against any named entity.
• Homepage swap widget: the sample completed order shows a truncated Solana address and a "tx link on your order", and no transaction is independently checkable from the page.
• Telegram is the only social channel linked, so no independent corporate presence is available for cross-checking.

Summary Verdict

The available evidence supports an elevated-risk assessment. An active external threat listing, a deposit-first custodial model, and several self-contradicting claims on the homepage converge on one conclusion: the site does not meet the standard for trustworthy interaction. The brand-new registration and the absence of any verifiable operator mean there is nothing in the evidence to offset these signals.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is an edge node. The origin server could not be observed, so hosting cannot be verified independently. The certificate is valid and the hosting is mainstream, which mitigates only the technical risk of interception. It does nothing to offset the reputation and business-model risks above. A very young domain with sparse subdomains behind a shared edge network is the usual setup for rapid content swaps.

Closing Assessment

The site should not be used for account sign-in, wallet connection or any payment, and no funds should be sent to the handle it advertises. Anyone who has already transacted should preserve their records, stop further transfers, and report the account to the relevant platform and payment provider.