Is farm-house.io a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Farmhaus is a commercial storefront, reached through a short-lived-looking .io domain, that sells ready-made Facebook and Google accounts. Its page title, which is in Russian, promises replacement of any account within 72 hours. A visitor sees an account-resale offer built around a rapid replacement guarantee, which suggests a transactional business model of buying pre-registered or aged social and advertising accounts in bulk.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent threat-intelligence sources currently flag the domain as malicious or suspicious, and an external blacklist listing is confirmed. The domain is therefore treated as blacklisted, and this is the main driver of the elevated risk assessment. The storefront's product, resold Facebook and Google accounts, is a category closely tied to account-fraud, ad-abuse and credential-trading ecosystems. The headline promise of replacement within 72 hours implies that the accounts are expected to be suspended or lost, which is consistent with disposable, policy-violating inventory. No brand impersonation, phishing form capture or conflicting legal identities were observed, and no wallet-connection or clipboard-manipulation behaviour was seen. In three of three automated visits the site returned a stable page. It showed no cloaking, no hidden forms and no credential posts to external hosts. This only shows that the page itself is not overtly malicious in its behaviour. It does not offset the confirmed reputational listing. Buyers face a high risk of paying for accounts that are never delivered, are immediately banned, or are later recovered by their original owners. Evidence:

• Homepage: the page title advertises Facebook and Google accounts with a 72-hour replacement guarantee, and this is the site's entire proposition.
• Reputation: four threat-intelligence engines rated the domain malicious and two rated it suspicious, and an external blacklist listing is confirmed.
• Domain provenance: registered 2026-08-25 (~0.17 years old) through PDR Ltd. d/b/a PublicDomainRegistry.com.
• Archive depth: 1 archive snapshot, captured 2026-09-02, with 1 year tracked, so there is no historical footprint.

Regulatory Verification Notes

Account resale of this kind has no recognisable licensing or registration framework, and no regulator, registry listing or corporate registration could be associated with the operator. Page-level identity analysis could not independently connect the site to a real-world business or person, so the operator's legitimacy cannot be inferred from on-site claims. The absence of a verifiable corporate identity is a verification gap, not proof of wrongdoing. Here it sits alongside confirmed reputational contradictions and a very recent registration, so it carries no mitigating weight. No broker-reputation record matches the domain. Evidence:

• Identity: the captured homepage content gave no basis for independently tying the site to a named legal entity.
• Transport security: the TLS certificate is issued by WE1 as a domain-validated (DV) certificate, valid to 2027-01-21. DV validation confirms control of the domain only and says nothing about who operates it.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any dealing should first establish who actually operates the service, using independent sources outside the site. Prospective buyers should also check the terms of Meta and Google on transferring or reselling accounts, since purchased accounts are commonly suspended and may breach those terms. The threat-intelligence listings should be rechecked before any engagement to see whether they have been resolved. If contact with the service is unavoidable, official support and contact channels should be confirmed through an independent route and not through links on the site itself. Any claim of operating legitimately should be backed by a verifiable registered business, not by the site's own assertions. Evidence:

• Registration: the domain was created 2026-08-25 and expires 2027-08-25, a single-year term, so no long-term commitment is evident.
• Reputation: the confirmed listings come from more than one independent source, so the check should cover several reputation databases.
• Homepage: the 72-hour replacement guarantee is an unverifiable, self-reported claim.

Summary Verdict

The overall posture is high-risk. Confirmed adverse reputation from multiple independent sources, together with a business model built on resold social and advertising accounts and no verifiable operator identity or track record, places the domain firmly in the cautionary category. The clean technical behaviour of the page itself does not change that conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and the origin server was not visible. The certificate is valid and issued by a recognised authority. These protections are only a mitigating factor. They provide transport security and availability, and they make independent verification of the real hosting harder. They cannot offset the external threat detections.

Closing Assessment

Read-only viewing, if it is needed at all, is the most that is appropriate. The site should not be used to log in, enter credentials, make payments or place orders, and no files should be downloaded from it.