h5[.]onsts[.]com

As of August 04, 2026, the domain h5.onsts.com is under investigation for involvement in generic phishing activity. The domain is currently active and has been blocked by the security vendor PhishDestroy. Additionally, it appears on one security blocklist, which further substantiates concerns about its use in phishing attacks. VirusTotal has scanned the domain using 91 different vendor engines; however, none currently flag it.

It is important to note that the absence of detections from these vendors does not confirm that the domain is safe or benign. No further information is available regarding the exact content hosted on h5.onsts.com, as there is no analysis of its page title, targeted brand, HTTP status, SSL details, registrar, or hosting infrastructure within the current dataset. The nature of the reported activity is described only as generic phishing, with no evidence supplied to link the domain to more specific attack types or brands. At present, there is no direct evidence of credential harvesting, malware distribution, or other specific techniques.

Defenders should treat this domain with caution due to its presence on at least one industry blocklist and an explicit block by a security vendor. Continued monitoring is recommended, and defenders may consider blocking access at the network level until additional analysis can clarify the scope and impact of the reported abuse. The investigation remains ongoing pending further technical details or incident reports.