How to report a phishing site to Cloudflare
Hosting provider — CDN and proxy, and the host of Cloudflare Pages (*.pages.dev) sites.
How to reach them
Sites on these addresses
Cloudflare owns the parent domain, so it can remove a page on any of these directly — no registrar involved.
- *.pages.dev
What to include
- Include the full URL, not just the domain.
- Attach a screenshot and the date/time you saw it.
- State plainly that it is phishing or fraud, and what it impersonates.
- For a proxied site Cloudflare usually forwards to the origin host rather than removing content; for a pages.dev address it is the host itself.
Other ways to report to Cloudflare
- Cloudflare Registrar — Domain registrar — can suspend the domain name itself.
Not sure who hosts the site?
Scan it — we'll identify the host and registrar and give you the routes that apply.
Scan a websiteThese details have not been re-checked against Cloudflare's official page recently. Confirm before relying on them.