Is revenuetopup.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Revenue (revenuetopup.com) is a newly launched crypto payment-bridge web app that presents itself as a way to cash out X Money balances into USDC, USDT, SOL or ETH delivered to the customer's own wallet. A visitor is asked to sign in with an X account, paste a wallet address, and send dollars to a single X handle, @RevenuePay, in exchange for a quoted 2% + $0.50 fee. The apparent business model is a manually settled, custodial conversion service. A promotional layer sits on top of it: a $REV token with a "Snapshot is Live!" banner, welcome bonuses, and an invite-code "card" program.

Scam/Impersonation Risk

The evidence shows hard contradictions and warrants a clearly cautionary reading. Multiple independent threat-intelligence sources currently flag the domain as malicious or suspicious, and it is confirmed blacklisted. The flags come without a specified threat type, so the nature of the detection is unattributed. No brand impersonation or conflicting legal identities were observed. The homepage's own mechanics add concern. Funds must be sent to an individual X handle before anything is delivered, and payouts are settled by hand. The "payout notifications" feed shows round-number payments of $900 to $18,000 stamped seconds apart, while the same page labels money payouts "opening soon". The feed is therefore unverified and reads as a manufactured social-proof device. The welcome bonuses of $20–$600 are described as locked until October 4, 2026, a date that falls before the domain was even registered. This points to a promised benefit that cannot be reconciled with the site's own timeline. The $REV token, the invite codes that count recruits on a member's "card", and a stated limit of up to $20,000 per swap push users toward larger deposits and recruitment. A "Not affiliated with X Corp" disclaimer is the only identity statement, and it establishes nothing about who operates the service. Telegram is the only social channel offered. Evidence:

• Homepage: instructs users to pay a single X handle first and receive funds by manual payout, and shows a payout feed alongside an "opening soon" label for money payouts.
• Homepage: bonus lock date of October 4, 2026 precedes the domain's registration on 2026-10-05.
• Domain registered 2026-10-05 (~14 days old); the web archive holds only 3 snapshots, from 2026-10-05 to 2026-10-13 (1 year tracked).
• Homepage form: collects X sign-in and a wallet address, and was assessed as a sensitive form with an untrusted destination.

Regulatory Verification Notes

The site shows no licence, regulatory registration, legal entity name, company address, or independent audit. For a service that takes custody of customer funds and converts them across currencies, this is a material disclosure failure, and it compounds the contradictions above. Operator ownership and governance are opaque, and the service's real-world operator is not independently identified. No third-party broker-reputation record matched the site, so no external regulatory signal either supports or counters the on-page picture. The registrar is NICENIC International Group Co., Limited. Evidence:

• Homepage: no licence, legal entity, address, or audit statement; the only identity-related text is the non-affiliation disclaimer.
• Domain registered through NICENIC International Group Co., Limited, with a one-year registration term expiring 2027-10-05.
• Served from AS13335 (Cloudflare, Inc., US); TLS certificate issued by YE2 (DV), valid to 2027-01-03. A DV certificate confirms only domain control, not operator identity.

What to Verify Next

Any claim of regulated money-transmission or virtual-asset service status should be checked directly with the relevant financial regulator's public register, because none is asserted. The existence and control of the @RevenuePay handle, and its link to a named legal entity, should be confirmed through independent channels rather than through links on the site. Support and contact channels should likewise be confirmed independently, not through the page. The payout feed and bonus claims should be treated as unproven until a named third party documents completed payouts. Any $REV token claim should be checked against independent on-chain data and not against the site's own banners. Evidence:

• Homepage: payout notifications, the "Snapshot is Live!" banner, and bonus terms are all self-asserted with no external corroboration.
• Homepage: Telegram is the only external link, with no corporate contact page or address.
• Homepage: payments are directed to a social-media handle and not to a named company account.

Summary Verdict

The site sits at the lowest tier of trust, with active threat-intelligence detections, a prepayment custodial model, and an unverifiable operator behind a very new domain. The technical hygiene it shows is routine and does not offset these findings. Legitimacy cannot be supported on the available evidence.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and all observed addresses are edge nodes, so the true origin host is not visible. Transport encryption is valid. These protections are mitigating factors only. They are common to legitimate and malicious sites alike and cannot offset the reputation findings. The edge-only visibility also means content could be changed rapidly without independent hosting verification.

Closing Assessment

The site should not be used for sign-in, wallet linking, or any transfer of funds. Anyone who has already sent money or connected an account should preserve their order references, stop further payments, and report the matter to their payment provider and the relevant platform.