# buttholenews.pages.dev — SUSPICIOUS

> PhishDestroy identifies buttholenews.pages.dev as an active adult-themed phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies buttholenews.pages.dev as an active adult-themed phishing site designed to trick users into revealing personal or financial information under the guise of adult content. This domain mimics legitimate adult entertainment platforms to deceive visitors, often using sensationalized or misleading content to lure clicks. The threat involves credential harvesting, payment fraud, or malware distribution, posing significant risks to unsuspecting users who may unknowingly disclose sensitive data or download harmful files.


This domain was flagged by PhishDestroy after analysis revealed critical indicators of compromise. Registered through Cloudflare, Inc., buttholenews.pages.dev has 0 detections out of 95 VirusTotal scans, indicating it evades most automated detection systems. The domain resolved to IP 188.114.97.3 and uses a Google Trust Services SSL certificate, which may lend false legitimacy to the site. The domain was created recently, though the exact registration date is pending further OSINT correlation. These technical attributes—combined with the absence of detections—suggest an emerging or evolving threat that requires immediate attention from security teams and users alike.


If you visited buttholenews.pages.dev, take these steps immediately to protect yourself. First, avoid entering any personal information, login credentials, or payment details on the site. Scan your device with updated antivirus software to check for malware or unauthorized access. Next, review your financial accounts for suspicious transactions and consider resetting passwords for accounts that may share credentials with this domain. Finally, report the domain to your organization’s security team or to organizations like PhishDestroy, Google Safe Browsing, or your local CERT. Do not reopen links from this domain in emails, messages, or browsers to prevent potential drive-by downloads or further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1fdb25e3-4dbc-4d59-9dda-af207cbb097d
- PhishDestroy: https://phishdestroy.io/domain/buttholenews.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/buttholenews.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/buttholenews.pages.dev/
Last updated: 2026-04-01