Conversation

Cloudflare has more services to watch for. Workers[.]dev and pages[.]dev have been being used as links in malicious emails.

Cloudflare says Workers is a system to “deploy serverless code instantly across the globe”. Whereas “Pages is a JAMstack platform for frontend developers to collaborate and deploy websites.”

Both services have free versions which are abused. Silver lining, Cloudflare might not be directly profiting from the malicious use of all of their services.

#threatintel