Some time ago, this security system was exempt for sites using Cloudflare. However, after a recent change made by iFastNet (the provider of InfinityFree), it will now also show this javascript challenge to Cloudflare-proxied sites.
Read some posts from this topic if you want to understand why this change happened: