Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
- ID
- 35871
- Status
- summarized
- Published
- 15 Oct 2026, 10:11 PM
- Fetched
- 15 Oct 2026, 11:30 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/10/help-tds-linked-to-hotejka-as-20000.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 4.5
- Created
- 15 Oct 2026, 11:31 PM
- Tags
- Audience
- developersvibe_coders
What happened
The Hacker News reports that a traffic distribution system called "Help TDS" has been tied to an actor tracked as Hotejka, with more than 20,000 Cloudflare Pages domains used to host tech support scams. The item was published on 15 October 2026 and is categorized under security. The excerpt provided contains only the headline, source metadata, and site navigation — no body text, methodology, indicators, or Cloudflare response is available to summarize.
Why it matters
Cloudflare Pages is the same free static-hosting tier many builders use for landing pages, docs, and prototypes, and the headline claims scam operators are running 20,000+ domains on it — so anyone shipping a *.pages.dev URL should expect tighter abuse-based reputation blocking on that shared domain space. Beyond that, the text gives no indicators, takedown process, or Cloudflare statement, so there is nothing here to act on technically; treat it as a flag to watch, not a change to make.
Discussion angle
Free-tier static hosting as abuse infrastructure: if 20,000+ scam domains can live on Cloudflare Pages, what does that mean for the reputation of shared subdomains your own *.pages.dev links sit on — and would you move a production domain to a custom domain because of it?