Cloudflare is a haven for abuse.

Most large scam groups now have their own ASNs and IP registrations, so CF just forwards them the report and tells you to contact fiberscam.co.za or whatever fake company the scam group has created. They are not cut out for this workaround and yet the largest scam groups have been using it since 2023.

I don't think they are currently doing any statistical analysis, one provider has just 3 /24s and hosts thousands of scam shops, hundreds of reports to CF and nothing done, they won't consider blocking the ASNs even when you show them a report that 98% of the IPs they own serve scam shops.

At this point I consider CF willfully negligent.