Wait, you are using cloudflare as your .dev registrar or just DNS? My CF dash still shows my .dev domains as unsupported for transfer in.
At work we had an entire .dev domain nuked at the registrar level by google because a developer generated some traffic google didn't like on a subdomain. They replaced the ENTIRE domain with a google phishing warning page with no way to bypass to get to the actual site.
It took multiple days to resolve the phishing false positive and restore the domain, if it had been our main domain it would have a major emergency at work.