Cloudflare phishing & impersonation
Tech & Cloudcloudflare.com
20
Sites impersonating it
14
New in the last 30 days
0
Campaigns
2026-10-23
Last detected
Official domains
cloudflare.com
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Sites impersonating Cloudflare
5 of 20 sites · newest first · repeat scans of a site are grouped
454 lower-risk copies are not shown: sites that use the Cloudflare name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — five-dot "Just a moment....." cfForm gate (YARA content anchor) (turnstile-gate-kit-202609)Identified as Cloudflare by our AI analysisAI analysisIdentical page
RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — five-dot "Just a moment....." cfForm gate (YARA content anchor) (turnstile-gate-kit-202609)Identified as Cloudflare by our AI analysisAI analysisIdentical page
RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — five-dot "Just a moment....." cfForm gate (YARA content anchor) (turnstile-gate-kit-202609)Identical to a page confirmed as CloudflareIdentical page
RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — five-dot "Just a moment....." cfForm gate (YARA content anchor) (turnstile-gate-kit-202609)Identical to a page confirmed as CloudflareIdentical page
rne8b0wt5znenjp.xyz 2026-09-14RulesMaliciousAIHigh RiskKnown Kit: DarkSword iOS exploit kit: fake captcha gate with a hidden exploit iframe (Coruna wallet stealer) (darksword-ios-exploit-2026-10)Identified as Cloudflare by our AI analysisAI analysis
90 further sites are not listed at all: the Cloudflare name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).