h5[.]uniusd[.]com

The domain h5.uniusd.com is assessed as having an elevated risk level and is identified as a generic phishing site impersonating Unishares. This domain poses a threat to users by potentially stealing credentials or other sensitive information through a deceptive web page designed to mimic the legitimate Unishares site.

Analysis indicates that h5.uniusd.com was created on April 19, 2022, and is registered through Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn). The domain resolves to the IP address 103.106.188.240. According to VirusTotal, 4 out of 95 security vendors flag this domain as malicious, suggesting a moderate level of consensus among security tools. The domain appears on 1 security blocklist and is currently blocked by PhishDestroy. As of the latest assessment, the domain is offline, which may indicate that the site has been taken down or is no longer active.

To mitigate the risks associated with this domain, users are advised to avoid clicking on any links or entering personal information on web pages that appear suspicious or do not match the official Unishares site. Organizations should update their security policies to include this domain in their blocklists and educate employees about the signs of phishing attacks. Additionally, network administrators should monitor for any attempts to access this domain and implement DNS filtering to prevent any potential redirects or malicious activities.