Is revenuehttps.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Revenue is a single-page crypto cash-out service. It invites visitors to sign in with X, send dollars to the @RevenuePay handle on X Money, and receive USDC, USDT, SOL or ETH in a wallet address they paste into the page. It charges a fee of 2% plus $0.50 per conversion and also promotes a $REV token, a welcome bonus and a member invite programme. Its apparent business model is fee income from a manually operated, custodial payment-to-crypto bridge.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily. Two major security vendors currently flag the domain as malicious, and further engines rate it suspicious, which amounts to a confirmed blacklisting alongside corroborating external detections. No conflicting legal identities and no confirmed brand impersonation were observed. The page states that it is not affiliated with X Corp, yet the whole service depends on X's payment handle and sign-in. The homepage describes a flow in which the user pays an individual handle and the operator then sends coins "by hand" from its own funds. User money is therefore held in custody with no verifiable process, no escrow and no audit. The page shows a ticking feed of large "payouts", from $900 to $18,000, each credited to "Revenue Payments". The feed is scripted and refreshes every few seconds, and nothing in it can be verified. These figures read as manufactured social proof. The same page advertises a locked welcome bonus of $20 to $600 with no verifiable unlock date, a $REV token with a "snapshot is live" banner, and an invite system that rewards referrals. That combination of unverifiable payouts, a promotional token and referral incentives is characteristic of advance-fee and deposit-capture schemes. The sign-in form, the wallet-address field and the amount field send sensitive input to a destination that cannot be trusted. The site's own sandbox observed no hidden forms, wallet-drainer behaviour or clipboard tampering, but that does not offset the structural custodial risk. Evidence:

• Homepage: instructs users to pay @RevenuePay on X Money and receive crypto manually. It also describes payouts "sent by hand" and a swap limit of up to $20,000 per order.
• Homepage: a scripted payout ticker shows unverifiable payouts from $900 to $18,000. A locked $20 to $600 welcome bonus and a $REV token are promoted alongside it.
• Domain registered 2026-10-05 (about 15 days old, 0.04 years). The web archive holds only 3 snapshots, spanning 2026-10-05 to 2026-10-13, with 1 year tracked. This shows a brand-new footprint with no operating history.
• Threat intelligence: two major security vendors flag the domain as malicious and two more as suspicious, with an external blacklist hit.

Regulatory Verification Notes

The site presents no legal entity name, licence or registration number, company address, terms of service or audit. The only contact artefacts are an X handle and a Telegram channel. For a service that takes custody of customer funds and moves value between fiat balances and several blockchains, these omissions are material and not merely administrative. Ownership and governance are also opaque. The registrar record is incomplete, and nothing on the site names a responsible person or company. No third-party broker or regulatory-register match exists for the operation, so no external signal offsets the absence of disclosures. Together with the confirmed external detections, this places the service outside any identifiable supervisory framework. Evidence:

• Homepage: no operator identity, licence, address, audit or complaint channel is displayed, and the page carries only a disclaimer of affiliation with X Corp.
• Domain registered through NICENIC International Group Co., Limited, with an expiry of 2027-10-05 and incomplete owner details.
• Transport encryption: a domain-validated TLS certificate issued by YE2, valid to 2027-01-03. This confirms an encrypted connection only, not any operator identity.

What to Verify Next

Before any interaction, independent confirmation of the operator is needed. Any claimed licence or registration should be checked directly with the relevant financial regulator's own register, using the regulator's website and not links supplied by the site. The official X and Telegram accounts, and any support channels, should be confirmed through an independent, offline route. The claimed payouts and welcome bonus cannot be corroborated from the site, so they should be treated as unproven. Anyone who has already sent funds or connected a wallet should check the transaction history, revoke any wallet approvals, and report the activity to their payment provider. Evidence:

• Homepage: payout confirmations reference order codes and truncated wallet addresses, but no public transaction record that an independent party could audit.
• Homepage: the welcome bonus has no verifiable unlock date or terms.
• Site-wide: no regulator, registry or licence reference is given that could be checked.

Summary Verdict

The site is assessed as critically untrustworthy. Confirmed external detections, an undisclosed custodial money flow, unverifiable proof-of-payout claims and a newly created presence converge on a high-risk conclusion. Technical hygiene does not alter this, and the available evidence does not support treating the operation as a legitimate financial service.

Infrastructure Integrity

The site is served from AS13335 on Cloudflare's network in the United States, and all observed addresses are CDN edge servers. The origin server could not be observed, so the actual hosting location cannot be verified independently. The protective CDN and a valid certificate are mitigating factors only. They offer no assurance about the operator and cannot offset the reputation findings. They also allow content to be swapped rapidly without any change in the visible hosting footprint.

Closing Assessment

The site should not be used for sign-in, wallet connection, payment or any transfer of funds, and its handle, token and bonus offers should be ignored. Anyone who has already interacted with it should act on the remediation steps above and report the activity to the relevant platform and payment provider.