TLD Threat Intelligence

Flagged .surf Domains

441 domains using the .surf extension have been flagged by threat-intelligence feeds. The .surf extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe.

441
Flagged Domains
27
Avg Risk Score
May 19
Last Flagged

Flagged .surf Domains

60 shown
DomainLast Seen
losslvs.surf May 19 ziparks.infinitynodesys.surf May 6 domregs.noopcup.surf May 6 autboxs.plsqlnew.surf May 6 rawdats.infinitynodesys.surf May 6 refid-xs.plsqlnew.surf May 6 comwebs.plsqlnew.surf May 6 jobadms.infinitynodesys.surf May 6 taskids.plsqlnew.surf May 6 libsyss.infinitynodesys.surf May 6 ioflows.plsqlnew.surf May 6 ftpsrvs.infinitynodesys.surf May 6 syncits.plsqlnew.surf May 6 uidmaps.infinitynodesys.surf May 6 doclabs.portcry.surf May 6 srcgets.masterlogicgrid.surf May 6 modbuss.masterlogicgrid.surf May 6 envsets.portcry.surf May 6 bitkits.portcry.surf May 6 pkgruns.masterlogicgrid.surf May 6 subclis.portcry.surf May 6 extnets.masterlogicgrid.surf May 6 pwrlogs.masterlogicgrid.surf May 6 lanhops.portcry.surf May 6 proxyss.portcry.surf May 6 domregs.masterlogicgrid.surf May 6 autboxs.primeflowspace.surf May 6 optwebs.rodrules.surf May 6 refid-xs.primeflowspace.surf May 6 usrgrps.rodrules.surf May 6 comwebs.primeflowspace.surf May 6 vmlists.rodrules.surf May 6 sshpros.rodrules.surf May 6 taskids.primeflowspace.surf May 6 ioflows.primeflowspace.surf May 6 tcpcons.rodrules.surf May 6 netmans.rodrules.surf May 6 syncits.primeflowspace.surf May 6 doclabs.quantumtechbox.surf May 6 syskeys.zooblob.surf May 6 envsets.quantumtechbox.surf May 6 webdocs.zooblob.surf May 6 appsrch.zooblob.surf May 6 bitkits.quantumtechbox.surf May 6 logbins.zooblob.surf May 6 subclis.quantumtechbox.surf May 6 lanhops.quantumtechbox.surf May 6 proxyss.quantumtechbox.surf May 6 osbases.nodespit.surf May 6 metalts.nodespit.surf May 6 optwebs.cybermetagrid.surf May 6 apidocs.nodespit.surf May 6 dbinsts.nodespit.surf May 6 usrgrps.cybermetagrid.surf May 6 vmlists.cybermetagrid.surf May 6 skyvpns.nodespit.surf May 6 sshpros.cybermetagrid.surf May 6 tcpcons.cybermetagrid.surf May 6 cmdsets.nodespit.surf May 6 netmans.cybermetagrid.surf May 6

Frequently Asked Questions

Are all .surf websites scams?

No. The .surf extension is not specifically high-risk, but it is still used by scammers. The TLD alone does not determine whether a specific domain is safe. Many legitimate sites use .surf. This page lists only the specific .surf domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .surf domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .surf site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →