CloudFlare has issued a warning about a targeted phishing campaign making the rounds among its customers. The rogue e-mail message includes the domain the victim is using in conjunction with the service. The attackers get their info from the Whois database, which is publicly visible on the domain nameservers. If you got the message and entered your personal information on the phishing page, you are advised to use the forgot password link to reset your password. If a customer has used the service, they can do quite a few bad things with their domain.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/phishing-campaign-targets-cloudflare-customers/