77% of Flock Safety’s Public DNS Namespace is Development Infrastructure

This Flare Academy report examines passive DNS for flocksafety.com and finds 290 legitimate hostnames dominated by development environments (per-change preview deployments), 32 hostnames resolving to private RFC1918 addresses revealing internal addressing, a numbered series of tunnel proxy endpoints consistent with the device check-in layer, a wildcard DNS record that inflated observed hosts by 43%, and 23 corporate identities present in criminal credential datasets; it assesses risk, maps ATT&CK relevance, and recommends immediate mitigations such as auditing public DNS, removing public preview names, filtering wildcard artifacts, and treating exposed credentials as compromised.