Any way to verify that this is legitimate and not a phishing page for active card numbers?
Especially since this means anything you submit will be decrypted by Cloudflare. It may then be transmitted in the clear to whoever runs the backend sever that Cloudflare is proxying for.