Our team set up a Turnstile widget and added our prod into widget’s domain list. After few minutes prod was flooded with request from origin: https://pages.dev/cdn-cgi/trace which lead to crash of our server.
Hi,
Thank you for reaching out to us. I’m sorry that you’re experiencing issues, but I’ll be glad to assist you.
The https://pages.dev/cdn-cgi/trace is typically an endpoint that returns trace information about the request, such as IP, country, and user-agent.
Can you please confirm you’ve followed the all the steps here: Get started with Turnstile · Cloudflare Turnstile docs
You should make sure that your Turnstile widget’s domain allowlist is correctly configured. Only add your production domain (e.g., yourdomain.com) Hostname management · Cloudflare Turnstile docs
Kindly,