diff --git a/Build/constants/phishing-score-source.ts b/Build/constants/phishing-score-source.ts
index 2c7dbba2..8dcbf1cc 100644
--- a/Build/constants/phishing-score-source.ts
+++ b/Build/constants/phishing-score-source.ts
@@ -46,6 +46,7 @@ export const WHITELIST_MAIN_DOMAINS = new Set([
   'myqcloud.com', // curben phishing-filter contains many entries
   'surge.sh', // caused by phishing-filter, also no public suffix
   'backblazeb2.com', // phishing-filter, no publicsuffix, too much abuse
+  'cloudflarestorage.com', // Cloudflare R2 S3-API endpoint, phishing-filter false-positives the entire apex
 
   'pages.dev',
   'workers.dev'