How to report a phishing site to Cloudflare Registrar

How to reach them

• Choose a category that starts with "Registrar -"
• Cloudflare says the online form is the best way to get a prompt response

Reporting to Cloudflare Registrar, step by step

1. Check the registrar first. Cloudflare's RDAP server (rdap.cloudflare.com) answers for domains it sponsors and shows "Cloudflare, Inc." in the registrar field.
2. Go to abuse.cloudflare.com and choose a report category that starts with "Registrar -". Cloudflare's registrar abuse page asks for this so the report reaches its registrar team rather than the CDN team.
3. Name the domain and give the link to the phishing page that runs on it, and explain that the domain is being used to deceive people.
4. If you prefer email, Cloudflare says that where it is listed as the registrar in WHOIS you can write to [email protected]. It adds that its online system is the best way to get a prompt response.
5. The number +1.4153197517 appears as the abuse phone in Cloudflare's RDAP data. Cloudflare's registrar abuse page gives the same number for law enforcement officials.
6. If the same site also shows Cloudflare IP addresses, that is a separate matter for Cloudflare's "Phishing & Malware" category, filed as its own report.

What Cloudflare Registrar asks you to include

• The registered domain name and the full address of the phishing page. Cloudflare's docs say a valid phishing report needs both the domain and the specific link.
• A short account of what the domain is used for, such as a fake login page or a payment scam, so Cloudflare can treat it as technical abuse rather than a content complaint.
• Police and other law enforcement officials writing to [email protected] must give a badge and case number, Cloudflare says, to receive a response.

What Cloudflare Registrar can do

• Cloudflare's Domain Registration Agreement lets it cancel, suspend, transfer, redirect or modify a registration, or put the domain on lock, hold or a similar status, if the domain's use is abusive. The agreement names phishing, distributing malware and fraudulent or deceptive practices as abusive use.
• Cloudflare says it takes reasonable steps through its registrar-abuse process to investigate and act on reports submitted through its abuse page.
• Cloudflare says it will take reasonable steps to investigate claims that a domain's WHOIS data is inaccurate, and it accepts reports of domain hijacking through the same abuse page.

What Cloudflare Registrar cannot do

• Cloudflare says domain registrars can only take action on entire domains, so a complaint about one page on an otherwise genuine site is generally not something Cloudflare Registrar can fix.
• For a domain name that copies a brand, Cloudflare says it will not step into disputes between registrants and third parties until a dispute resolution expert instructs it, under ICANN's UDRP or, for new TLDs, the URS.
• Cloudflare's RDAP output shows the registrant's name and phone as "DATA REDACTED", so a lookup will not tell you who owns the domain.

What happens after you report

• Cloudflare says its registrar-abuse process investigates the report and takes action where it finds abuse such as phishing.
• Cloudflare does not publish what it tells the reporter afterwards or how long registrar reports take.

Write the report

Paste the link, phone number or email address and we'll write the message for Cloudflare Registrar. You send it yourself.

Is the site also hosted on Cloudflare?

This page is about the domain name. If the scam pages sit on Cloudflare's servers (an IP lookup shows it), the hosting route is the one that can take the content down. Report to both when the same company does both jobs.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.