How to report a phishing site to Cloudflare

How to reach them

Sites on these addresses

Cloudflare owns the parent domain, so it can remove a page on any of these directly — no registrar involved.

• *.pages.dev

What to include

• Include the full URL, not just the domain.
• Attach a screenshot and the date/time you saw it.
• State plainly that it is phishing or fraud, and what it impersonates.
• For a proxied site Cloudflare usually forwards to the origin host rather than removing content; for a pages.dev address it is the host itself.

Other ways to report to Cloudflare

• Cloudflare Registrar — Domain registrar — can suspend the domain name itself.

Not sure who hosts the site?

Scan it — we'll identify the host and registrar and give you the routes that apply.