Is magazine-cells-instructional-negotiations.trycloudflare.com safe?

A game-session signup, not a shop

The rendered page shows a circular globe logo with 'GLOBAL 1940' and the subtitle 'THE FAMILY WAR ROOM', a headline reading 'The next move can wait until Sunday.', and three feature labels: 'Up to 9 players', 'Every move saved', 'Two theaters. One war.' A hex-grid map of Europe and Asia styled as a WWII strategy board fills the page.

The only interactive element is a card titled 'YOUR CAMPAIGN STARTS HERE' / 'Gather your generals.' with 'New campaign' and 'Join / resume' tabs, a 'Campaign name' field pre-filled 'The Sunday campaign', and a 'Your name' field with the placeholder 'How your family knows you'. No price, cart, checkout, payment logos, subscription offer, contact details or company name are visible anywhere on the page, so there is no purchase or payment path to evaluate.

Mixed technical signals and an anonymous operator

One antivirus family, Yandex Safebrowsing, reported an adverse result for this host, while the wider engine set shows a single isolated detection across 93 engines with no vendor consensus, and the browser threat feed returned no threat warning. The hosting IP carries an abuse confidence score of 0/100 across two saved reports. A lone phishing label is not a confirmed verdict, but it is not nothing either.

The bigger structural concern is where the site lives. It is served from a trycloudflare.com Quick Tunnel subdomain, and independent reporting documents that free Cloudflare tunnels are routinely abused to make malicious infrastructure look legitimate and to evade filtering, including phishing links that trigger remote-access software downloads. That reporting describes the service in general, not this specific host, and no malicious payload, redirect or download was observed here.

A valid TLS certificate exists for the host, but the scanned address was served over plain HTTP with no redirect to HTTPS, so the connection was unencrypted. The page builds its content with scripts, so its own contact details were not visible to the page reader and were not reviewed; no operator name, registration number, email, phone or address was disclosed in what was captured.