cloudflare.bz
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of cloudflare.bz
The domain cloudflare.bz appears to present itself as a Cloudflare-related page, using branding and wording associated with the well-known web infrastructure and security company Cloudflare. Based on the screenshot, the page shows a supposed human-verification prompt and instructs visitors to perform unusual keyboard actions, which does not match the normal behavior users would typically expect from a standard website verification flow.
The domain itself uses the name of a widely recognized technology brand combined with a different country-code extension, which may indicate an attempt to resemble an official service. The site does not appear to function as a normal content website or online store; instead, it appears focused on displaying a single verification-style page that could be intended to influence user actions.
Safety Assessment for cloudflare.bz
Multiple security engines flagged this domain at the time of the scan, with several classifying it as phishing or malicious and others marking it as suspicious. The page content shown in the screenshot also raises concern because it appears to imitate a familiar verification screen while instructing the visitor to press keyboard shortcuts such as Windows+R and Ctrl+V, a pattern commonly associated with deceptive social-engineering attempts rather than legitimate bot checks.
The domain is also very newly registered, which may increase risk when combined with brand-like naming and a verification-themed landing page. Malware scanning indicated suspicious findings on the page itself, and one blacklist database also listed the domain, although major content-malice databases shown here did not flag it at the time of this scan. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate at the time of the scan, and it appears to be served by an nginx web server hosted on infrastructure in Amsterdam, Netherlands. The domain uses the nameservers a3.share-dns.com and b3.share-dns.net, and DNSSEC appears to be unsigned.
From a security perspective, the main concerns are not the TLS setup but the combination of a very recent registration date, brand-resembling domain name, suspicious page behavior, and multi-engine security detections. No external links, referenced domains, or iframes were identified in the provided scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?