It was okay with penrage.pages.dev but when I added penrage.com custom domain the https://penrage.com/api/auth/signin shows suspicious activity why is that ??

Thats a Google Safe Browsing warning on your domain that's outside of Cloudflare's control, if you believe its incorrect you can report it to Google: