Is revenuesite.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Revenue is a single-page crypto cash-out service that presents itself as a bridge from X Money balances to cryptocurrency. A visitor signs in with an X account, pays a named @RevenuePay account on X Money, and is promised USDC, USDT, SOL or ETH sent to a wallet address the visitor supplies. The business model is a custodial, manually settled conversion service that charges a 2% + $0.50 fee. It layers on a locked welcome bonus, invite-based member cards and a promoted $REV token.

Scam/Impersonation Risk

The assessment is clearly cautionary, because contradictory signals are present. The domain is currently blacklisted by external threat-detection sources, and several reputation engines flag it. One of them is a recognised major security vendor. This is a confirmed adverse reputational signal, and it is consistent with what the homepage asks of visitors. The core mechanic is a deposit before service. Funds go first to one individual-style social account on X Money, and coins are then "sent by hand" by the operator. No escrow, no smart-contract settlement and no independent proof of delivery is described, apart from an operator-supplied "transaction link" on the order. The homepage's demo order (a $20.00 payment returning 19.10 USDC to a Solana address) is a self-authored illustration, not evidence of completed customer payouts. The calculator advertises transfers of up to $20,000 per order, so the amount at risk in a single transaction is large relative to the evidence offered. The social proof contradicts itself. A looping feed of payouts such as "sent you $18,000" and "sent you $12,500" runs under a label saying money payouts are "opening soon", so the figures cannot reflect real activity. The welcome bonus of $20–$600 is locked until a future date and described as paid for "every bonus on the list", with no substantiation. The invite mechanic ("everyone who joins through your link is counted on your card") and the $REV token add referral-driven, token-promotional elements typical of high-pressure schemes. The single form combines a wallet-address field, a swap-amount field and an X social login, and the assessment treats its destination as untrusted. The "Not affiliated with X Corp." disclaimer does not offset any of this. No brand impersonation or conflicting legal identities were detected, so the risk rests on the blacklist hit and the deposit-first, unverifiable payment flow.

Regulatory Verification Notes

No licence, regulatory registration, legal entity name, company address or audit report appears anywhere on the homepage. The operator takes custody of customer funds and moves value between social-media payment rails and blockchains, which is an activity that would ordinarily be expected to carry disclosed authorisation. The site's own contact route is limited to a Telegram channel and the X account. Ownership and governance opacity are present. This is a limitation on identifying the operator, not an identity contradiction, because no conflicting legal names were found. The operator's real-world identity remains unverified, and no third-party broker or regulatory record was matched for this site. These disclosure gaps do not by themselves prove wrongdoing. Combined with the confirmed blacklist signal and a custodial, deposit-first flow, they leave the site with no mitigating accountability.

What to Verify Next

The only prudent course is to treat the service as unproven and to verify independently before any funds move. A claimed operator should be able to name its legal entity and show authorisation with the financial or virtual-asset regulator in its stated jurisdiction, confirmed directly through that regulator's public register and not through links on the site. The @RevenuePay account and the Telegram channel should be checked for age, history and independent customer reports of completed payouts. Any claim that the payout feed or bonus is genuine should be tested against third-party evidence, not the operator's own order links. Official support channels should be confirmed through an independent, offline route before any engagement.

Summary Verdict

The overall posture is high risk and clearly adverse. Adverse external reputation and a custodial, deposit-first payment model that cannot be independently verified converge on the same conclusion. The newness of the domain adds to it, and the clean technical presentation and valid encryption do not offset it. The evidence does not support treating this site as a legitimate financial service.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and all observed addresses are Cloudflare edge servers. The origin server is not visible, so the hosting cannot be independently attributed, and content could be changed quickly behind the edge. Cloudflare's presence is a modest mitigating factor, since it brings a protective layer and a valid certificate. It does not offset the reputation risk and says nothing about the operator's legitimacy.

Closing Assessment

Account login with X, wallet-address entry and any payment or transfer of funds to this service should be avoided. Browsing the page in a read-only manner is the only low-exposure use. Anyone who has already paid or authorised access should secure their X account and report the matter to the relevant platform and financial authorities.