🧰 Cloudflare Pages

The items that name it 3

• Socket: "Offside Wallet Theft Factory"
  writeup2026-08-19

  Legitimate hosting service abused to host the phishing Web3 wallet-import interface (e.g. portal-web3-extension-welcome[.]pages[.]dev)

• The Hacker's 2026 Playbook: Dark Web Tactics Targeting You
  article2026-06-29

  Free/widely available infrastructure used by attackers to host ConsentFix attack infrastructure, per the Russian cybercrime forum post.

• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  article

  Used by the threat actor to host an attacker-controlled URL wrapped in the fake Gmail attachment card anchor tag.

In every workspace you can read 5