# flokii-fi.live — MALICIOUS

> Warning: flokii-fi.live was identified as a phishing site. Learn about its threat profile and why it’s now offline for your safety.

## Summary
flokii-fi.live has been identified and classified as a generic phishing domain targeting unsuspecting users. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, it has been flagged due to its malicious intent to deceive users and steal sensitive information.

The domain resolved to IP address 188.114.97.3 and appeared on five security blocklists. VirusTotal detected this domain as suspicious, with 7 out of 95 security vendors flagging it for phishing-related activities. These technical indicators underscore its involvement in fraudulent schemes and the infrastructure supporting such attacks.

Currently, flokii-fi.live is offline, reflecting a decisive response to mitigate ongoing risks. Its removal from active DNS and blacklisting helps reduce exposure to potential victims. PhishDestroy continues to monitor similar threats and recommends vigilance when encountering unfamiliar domains resembling this pattern.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["thaddeus.ns.cloudflare.com", "harleigh.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "Lionic", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "ScamSniffer", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199a1fc-c41c-720f-b6a5-fdeafd8653b3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a7f82053-b97f-4d77-ac04-ce9c4b8f4f56
- PhishDestroy: https://phishdestroy.io/domain/flokii-fi.live/
- LLM endpoint: https://phishdestroy.io/domain/flokii-fi.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/flokii-fi.live/
Last updated: 2026-03-19