Must be upload in the root folder on server or by cPanel in /public_html
when not found disable cloudflare for a few minutes or you have a ddos protection like blazingfast, this make problems to find file for verify.