cloudflare.life
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Not checked: cloudflare.life showed the file scanner only a script, not its page.
Description of cloudflare.life
The domain cloudflare.life appears to be using a name that closely resembles Cloudflare, a well-known web infrastructure and security company, but on a different top-level domain. Based on the screenshot, the page presents itself as a verification or authentication step and uses branding cues that may cause visitors to associate it with the legitimate Cloudflare service.
The visible content does not appear to be a normal corporate website or standard product page. Instead, it shows an "additional verification required" prompt with step-by-step instructions involving Windows keyboard shortcuts and PowerShell input, which is not typical of ordinary website access flows. Based on the domain pattern, page presentation, and scan context, the site may be intended to imitate a trusted service in order to influence user behavior.
Safety Assessment for cloudflare.life
This domain was flagged by 2 security engines at the time of the scan, with detections related to phishing and malware. In addition, the domain closely resembles cloudflare.com and may be a look-alike intended to benefit from confusion with the legitimate brand. The screenshot adds to this concern because it shows a verification-style page instructing the visitor to open Windows PowerShell and paste commands, which is a common social-engineering pattern and is not consistent with a routine browser verification step.
Other signals also increase risk: the domain was registered very recently, it has no established traffic ranking, and it does not appear to have the profile of a long-standing public-facing service. While some blacklist and malware-scan sources did not report active threats at the time of this scan, those clean results do not outweigh the combination of brand resemblance, recent registration, suspicious on-page instructions, and multi-engine detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate, and it appears to be served through Cloudflare infrastructure on IP address 172.67.211.35. The web server response indicates Cloudflare hosting or reverse-proxy usage, which can obscure the origin server and is common for both legitimate and abusive sites.
The domain is newly registered and DNSSEC appears to be unsigned. No external links, referenced domains, or iframes were identified in the provided scan data. Although the TLS certificate is valid, that only indicates encrypted transport and should not be treated as proof of legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?