How to report a phishing site to Cloudflare
Hosting provider — CDN and proxy, and the host of Cloudflare Pages (*.pages.dev) sites.
How to reach them
Write the report
Paste the link, phone number or email address and we'll write the message for Cloudflare. You send it yourself.
Sites on these addresses
Cloudflare owns the parent domain, so it can remove a page on any of these directly — no registrar involved.
- *.pages.dev
What to include
- Include the full URL, not just the domain.
- Attach a screenshot and the date/time you saw it.
- State plainly that it is phishing or fraud, and what it impersonates.
- For a proxied site Cloudflare usually forwards to the origin host rather than removing content; for a pages.dev address it is the host itself.
Other ways to report to Cloudflare
- Cloudflare Registrar — Domain registrar — can suspend the domain name itself.
Not sure who hosts the site?
Scan it — we'll identify the host and registrar and give you the routes that apply.
Scan a websiteThese details have not been re-checked against Cloudflare's official page recently. Confirm before relying on them.