
PhishingReviewed
Fake Cloudflare check at cloudflare.life tricks users into running PowerShell malware
Threat researcher @Malwarehunterr posted on X on 10 November 2026 that the domain cloudflare[.]life impersonates Cloudflare and hosts a fake verification page (a 'ClickFix' lure) that tricks visitors into opening Powe…
- cloudflare.life
- Payload host hidread.net; file balenaEtcher_2.exe
Reported Nov 10, 20261 report