Is revenuepays.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "Revenue," a crypto cash-out service that converts X Money dollar payments into USDC, USDT, SOL or ETH. The single landing page tells visitors to sign in with X, send dollars to a personal X handle (@RevenuePay), and receive crypto in their own wallet. It states a fee of 2% plus $0.50 and a per-order ceiling of $20,000. It also advertises a "$REV" token snapshot, a locked welcome bonus and an invite-card referral program. The apparent business model is a manually operated, custodial fiat-to-crypto payment bridge that collects money first and pays out afterwards.

Scam/Impersonation Risk

The site carries confirmed contradictions and an explicitly cautionary posture. It is currently blacklisted by external threat-intelligence sources, including flags from two major security vendors, which is a decisive negative. No brand impersonation or conflicting legal identities were observed, so the risk rests on blacklisting and on the mechanics of the offer. The homepage asks the customer to pay a personal social-media handle before any crypto is delivered, and the operator then controls the funds and pays out by hand. The "payout notifications" show instant, rolling transfers of $900 to $18,000 with no transaction proof, and the same page labels money payouts as "opening soon." That contradiction points to a fabricated activity feed designed to manufacture credibility. The welcome bonus of $20 to $600 is shown as locked, with an unlock date earlier than the date of analysis, so the promised balance is already unredeemable on the page's own terms. The invite program and the "$REV" token add referral-driven growth incentives to a service whose payout record cannot be checked. Together these features fit a deposit-collection pattern, and the page offers the visitor no mechanism for recourse.

Regulatory Verification Notes

The page names no operating company, licence, registration number, physical address or verifiable contact route, and it carries only a one-line "Not affiliated with X Corp." disclaimer. For a service that takes custody of customer funds and moves value between fiat and crypto, this is a serious disclosure gap. The service's own claims cannot be tested against any registry. No third-party broker or regulatory-database match was found, and none should be assumed. Domain registration privacy is an administrative matter and is not treated as an identity contradiction. The weight here falls on the absence of any accountable operator behind the money flow.

What to Verify Next

Any prospective customer should independently seek an accountable operator before sending funds. That means checking whether a legal entity exists and holds a money-transmission or virtual-asset service-provider authorisation in a relevant jurisdiction. The "@RevenuePay" handle and the Telegram channel should be checked against official channels of any real provider, through an independent route and not through links on this page. The claimed X Money connection should be confirmed with X itself, since the site's disclaimer and its branding point in opposite directions. Official support and contact channels should also be confirmed offline. Any payout claim should be treated as unproven until a completed transaction is traceable on-chain to a wallet the customer controls.

Summary Verdict

The site is assessed at the lowest trust tier. External blacklisting, a brand-new domain, a custodial deposit-first model and unsupported performance claims converge on a clearly high-risk posture. Neither the page's polished presentation nor its working encryption offsets that convergence.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin server was not observable, which prevents independent hosting verification and could mask rapid content changes. Protection of this kind is a mitigating factor only. It says nothing about the operator's legitimacy and cannot offset the external threat detections or the risk in the business model. A young domain with sparse subdomains is a minor, unconfirmed heuristic and adds little weight.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or payment of any amount. Anyone who has already sent funds or signed in should stop further transfers, preserve order codes and screenshots, and report the activity to their payment platform and the relevant consumer-protection or financial authority. Read-only viewing is the only interaction consistent with this assessment.