All technologies

Cloudflare Pages

2 painsavg 6.0/10
security 1compatibility 1

Cloudflare abuse infrastructure (pages.dev/workers.dev) enables phishing and credential harvesting at scale

8

Cloudflare's free developer domains (pages.dev and workers.dev) have become a platform for brand-impersonation, phishing kits, and credential-harvesting campaigns. Pages.dev incidents rose 198% (460→1,370) and workers.dev by 104% (2,447→4,999) in 2024, with multiple security vendors documenting widespread abuse. Researchers report <30% takedown rates despite submitting hundreds of reports.

securityCloudflare PagesCloudflare Workers

Pages platform lacks Workers feature parity

4

Cloudflare Pages, the go-to for hosting static and full-stack websites, lacks access to features like Durable Objects (without creating separate Workers) and Workers Logs, limiting functionality compared to the Workers platform.

compatibilityCloudflare PagesCloudflare WorkersDurable Objects