westrnuniuon[.]com

This domain is flagged for elevated-risk brand impersonation targeting financial services, specifically Western Union. Analysis indicates the site was designed to deceive users into believing it was an official money transfer platform, potentially facilitating unauthorized transactions or credential harvesting. Infrastructure analysis reveals the domain westrnuniuon.com was registered on December 02, 2025, through Name.com, Inc., and resolved to the IP address 109.206.236.139, hosted in Finland under AS56971. The domain lacks an SSL certificate, increasing exposure to man-in-the-middle attacks. It appears on one security blocklist and is detected by 18 out of 95 security vendors on VirusTotal. The page title, 'Money Transfer | Global Money Transfer | Western Union,' directly mimics the branding of the legitimate service. Mitigation steps for this specific threat type include blocking the domain and associated IP at the network perimeter. Organizations should update endpoint protection rules to flag any attempts to access westrnuniuon.com or its resolved IP. Users should be educated to verify domain authenticity before entering credentials or financial details, particularly for services involving money transfers. Monitoring for similar typosquatting domains (e.g., variations of 'westernunion') is recommended to preempt further impersonation attempts.