I saw the whole Cloudflare Pay thing and had the exact same thoughts - this has to be some sort of phishing...