TLD Threat Intelligence

Flagged .dev Domains

447 domains using the .dev extension have been flagged by threat-intelligence feeds. The .dev extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe.

447
Flagged Domains
31
Avg Risk Score
Oct 13
Last Flagged

Flagged .dev Domains

60 shown
DomainLast Seen
app-ldgrlive-eng.pages.dev Oct 13 ledger-auth-live.pages.dev Oct 13 access-ledgr-desktop.pages.dev Oct 11 strts-ledgr.pages.dev Oct 11 exoduswalletcc.pages.dev Oct 11 roblox-4kx.pages.dev Oct 11 sp1ct10-dorval-biz-zulzo-pelri.pages.dev Oct 11 new-18a.pages.dev Oct 10 sp13ct-bastor-biz-hurek-franil.pages.dev Oct 10 vlsng521low-hbkfphb-0a5c2f-vlq42c.pages.dev Oct 10 sp15ct-zunvex-biz-qalren-korli.pages.dev Oct 10 sp15ct-kelzen-biz-mavroq-zunix.pages.dev Oct 10 ambil10jtkonfirmasiskrngg.pages.dev Oct 10 burmelo-mpt-funqari-r8x5me73.pages.dev Oct 10 io-ledger-desk-top-faq.pages.dev Oct 10 sp13ct-morel-biz-huren-fastor.pages.dev Oct 9 uspss.pages.dev Oct 9 sp14ct-zemra-biz-falken-moriv.pages.dev Oct 9 ledger-live-faq-wallet.pages.dev Oct 9 ur-exods.pages.dev Oct 9 mfopasdm.pages.dev Oct 9 sp14ct-turex-biz-golvin-rastek.pages.dev Oct 9 grapeberry.pages.dev Oct 8 edge-store-ovmn.p-dr3fjzo4.workers.dev Oct 8 nuliberacaops.fonsecadias731.workers.dev Oct 8 app-ledger-live-en-us.pages.dev Oct 8 ldgr--live-faq.pages.dev Oct 8 kash-ldgre-logoz-eng.pages.dev Oct 8 caelora-07.pages.dev Oct 8 flora-leaf.pages.dev Oct 8 xrr3xxw.pages.dev Oct 8 wxewxx3x.pages.dev Oct 8 wed23dd.pages.dev Oct 8 sp13ct-surel-biz-vorik-danem.pages.dev Oct 8 flow-note-zsgf.p-dthpnqnd.workers.dev Oct 8 loyumakina.pages.dev Oct 8 dravelo-kxt-farqela-c4x8dw95.pages.dev Oct 8 3fx3rx43x.pages.dev Oct 8 worker-throbbing-cake-edea.roseober17.workers.dev Oct 8 reaffirm-neatness-rigid.ngrok-free.dev Oct 8 mg3mqq-pgjre-9g471-o5b-lxi.pages.dev Oct 5 meta-zalimo-biz-ferako-nuviki.pages.dev Oct 5 sp33ct-zemaro-biz-funeki-kaluto.pages.dev Oct 5 auroralotus46.pages.dev Oct 5 schwabs.charles-app.workers.dev Oct 5 xjn39-121lk-bdf88-121pl-6a3b0c-qtz15-121p.pages.dev Oct 5 yahoo.hiddenspots.dev Oct 5 start-ledger-docs.pages.dev Oct 5 kv-cont-blared.pages.dev Oct 5 crypto-binance-guide.pages.dev Oct 4 ledgr-live-legr.pages.dev Oct 4 gfvcd93nhwu-klmqwfyn-4d1e7f-yh855a.pages.dev Oct 4 b71540238-bb74-4850-85fc-735393242525.edgeone.dev Oct 4 dasktop-live-ladgar.pages.dev Oct 4 eo-ledgerwllet.pages.dev Oct 4 coast-wing.pages.dev Oct 4 moon-crystal115.pages.dev Oct 4 ledgerliveapp--starthelp.pages.dev Oct 4 nke.pages.dev Oct 4 sp31ct-veruko-biz-pavri-zemol.pages.dev Oct 4

Frequently Asked Questions

Are all .dev websites scams?

No. The .dev extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe. Many legitimate sites use .dev. This page lists only the specific .dev domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .dev domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .dev site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →
← All flagged TLDs