adobe-ael[.]saliphaberylin[.]workers[.]dev

adobe-ael.saliphaberylin.workers.dev is a generic phishing domain that has been flagged as a high-risk threat. The site is currently active and is hosted on Cloudflare Workers, a platform often abused by malicious actors for its ease of deployment and built-in SSL. This domain does not appear to impersonate a specific brand, but its structure suggests it may be used for credential harvesting or other fraudulent activities. No specific drainer kit has been identified, but the generic nature of the phishing attempt makes it versatile and dangerous.

Technical indicators paint a clear picture of the threat. VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious, a strong signal of its dangerous nature. The domain was registered on April 29, 2026, and resolves to the IP address 188.114.97.3, which is associated with Cloudflare. The SSL certificate is issued by Let's Encrypt (E8), a free certificate authority that provides no validation of the certificate holder's identity. Google Safe Browsing has not yet listed this domain, but it appears on at least one security blocklist. The domain's creation date is very recent, which is a common characteristic of phishing sites that are quickly set up and taken down.

As of the latest assessment, the domain remains active and poses an ongoing risk. Users who have visited the site should scan their devices for malware and change any passwords that may have been entered. The recommended course of action is to block the domain at the network level and report it to Cloudflare for abuse. While the site is currently flagged by a significant number of security vendors, its continued operation means that new visitors could still be compromised. PhishDestroy advises all users to avoid interacting with this domain and to remain vigilant against similar phishing attempts hosted on free platforms.