farcaster-mock[.]vercel[.]app

This report details a malicious cryptocurrency-themed website impersonating the Farcaster brand. The site, titled "FARCASTER Mock Airdrop Checker," poses as a legitimate airdrop verification platform. The primary threat is that it lures users into connecting their cryptocurrency wallets or providing private keys under the guise of checking for an airdrop, leading to asset theft.

Technical analysis reveals the domain was created on 2026-02-21 and is registered with Tucows Domains Inc. The site is hosted on IP 216.198.79.131, which is owned by Amazon.com, Inc. and located in the United States. It uses an SSL certificate from Google Trust Services / WR1. VirusTotal shows 0/95 detections from security vendors, but it is flagged by 1 blocklist. GridinSoft trust is rated 0/100. Cloaking was detected via a "content_split" technique, indicating the site serves different content to users and scanners.

The domain is currently ACTIVE with a DOM risk score of 83 out of 100, indicating a high threat level. Despite low detection by security vendors, the combination of brand impersonation, recent creation, low trust rating, and cloaking behavior confirms this is a high-risk scam site targeting cryptocurrency users.