flockerz-livesale[.]pages[.]dev

Analysis indicates that flockerz-livesale.pages.dev is associated with a crypto drainer threat and remains active at the time of review. The domain presents cryptocurrency-themed content consistent with luring users into connecting wallets or interacting with high-risk transaction workflows. Given the current status, the infrastructure should be treated as under investigation and potentially hazardous to digital asset holders.

Technical indicators show the domain was created on December 17, 2024 and resolves to IP address 172.66.44.107. Detection coverage remains limited, with 0 of 95 VirusTotal vendors flagging the domain. The site is registered through Cloudflare Pages and currently appears on 1 security blocklist. Available intelligence shows it has been blocked by PhishDestroy. The observed SSL certificate is issued by Google Trust Services / WE1.

The domain is still active and should be handled with caution until further validation is available. Security teams should monitor for infrastructure changes, collect additional telemetry, and block access where appropriate. Users should avoid connecting cryptocurrency wallets, signing transactions, submitting sensitive information, or interacting with financial prompts originating from this domain. Continued observation is recommended because low detection rates do not eliminate the possibility of malicious activity.