silent-dust-b567[.]elymatldielwa4741[.]workers[.]dev

Analysis of the domain silent-dust-b567.elymatldielwa4741.workers.dev indicates that it is actively being used for a generic phishing campaign. The domain was registered on June 08, 2026 through the Cloudflare Workers platform, a service that supplies edge compute and hosting capabilities. VirusTotal records show that 13 of 91 security vendors have flagged the domain as malicious, providing a modest but notable detection ratio that aligns with its classification as a phishing vector.

The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the suspicion that it is being leveraged to deceive users. The threat’s risk level is elevated, and the campaign status remains active as of the report date, July 29, 2026. Defenders should prioritize adding the fully qualified domain name to deny‑list rules within network firewalls, DNS filtering solutions, and endpoint protection suites.

Continuous monitoring of outbound connections to the Cloudflare Workers infrastructure associated with this domain is advisable, as the hosting service can serve as a dynamic launchpad for additional malicious payloads. Organizations are encouraged to incorporate the detection count from VirusTotal into risk scoring models, and to reference the blocklist entry from PhishDestroy when configuring security policies. Given the limited public context, further investigative steps—such as retrieving HTTP response headers, examining TLS certificate metadata, and performing content analysis of any resolved pages—should be pursued to refine attribution and to identify potential phishing templates or credential harvesting techniques employed by the adversary.