why don’t you just block off port 80 and 443 entirely with firewall rules (but whitelisting the Cloudflare IPs)? serves the same purpose but is more secure
alternatively, you could add the ip to A record and proxy your website traffic via cloudflare. This will show your required page, if someone grabs the ip of the website via url.