The best route to request a takedown of this domain and luaventures{.}xyz (the other domain mentioned in your blog post) would be at the host and/or the domain registrar. Cloudflare isn't the host or registrar these domains. We have no capacity to take down content hosted by others.
In the vast majority of cases, Cloudflare is not the hosting provider of a website resolving to our IPs. In those cases we have no capacity to remove content hosted by others. In those cases we can place a phishing warning page (like Google safe browsing) to warn and educate users that they were nearly phished. If we simply terminated a website it would not remove the content, and the user wouldn’t learn or realize they almost just got phished. It’d be the worst of both worlds. In the rare case where we are the host we place a non-bypassable block in front to make protect users.
The best route to request a takedown of this domain and luaventures{.}xyz (the other domain mentioned in your blog post) would be at the host and/or the domain registrar. Cloudflare isn't the host or registrar these domains. We have no capacity to take down content hosted by others.