# onthehill.news — SUSPICIOUS

> onthehill.news poses a credential harvesting threat, mimicking legitimate news sites. Created March 15, 2026 with 0/95 VirusTotal detections, users should.

## Summary
PhishDestroy identifies onthehill.news as an active credential harvesting phishing domain designed to steal user login credentials by impersonating a trusted news outlet.

This domain was flagged due to its recent creation on March 15, 2026 (per WHOIS records), current lack of detection on VirusTotal with 0/95 engines flagging it as malicious, and registration through NameCheap, Inc. The site operates under a valid Let's Encrypt SSL certificate, which may lend false credibility to unsuspecting users. Technical indicators include resolution to IP address 104.16.243.55, a cloud infrastructure commonly abused by phishing campaigns to evade geographic blocking.

If you visited onthehill.news, immediately check for any entered credentials or personal information. Do not reuse passwords across accounts and consider changing passwords for sensitive services. Scan your device with updated antivirus software and monitor financial accounts for suspicious activity. Flag the domain to your browser or security provider for blocking. Report the incident to relevant platforms if credentials were submitted.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-15 03:57:14
- Registrar: NameCheap, Inc.
- IP: 104.16.243.55

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8493971a-e83c-48f9-a1c2-262d0bf996a3
- PhishDestroy: https://phishdestroy.io/domain/onthehill.news/
- LLM endpoint: https://phishdestroy.io/domain/onthehill.news/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onthehill.news/
Last updated: 2026-03-23