uniobnn[.]com

Analysis of uniobnn.com shows a newly registered domain (created March 15, 2026) that is actively serving a web page titled "Union Bank Int- Your New Favorite Bank". The site resolves to IP 145.79.20.107, a Hostinger server located in France, and uses LiteSpeed with HTTP/3, PHP, Bootstrap, jQuery, and the Hostinger stack. DNS is hosted on horizon.dns-parking.com and orbit.dns-parking.com, while the MX record points to the domain itself, a common technique for credential harvesting. The SSL certificate is issued by Let’s Encrypt (R13), and the HTTP response code is 200, indicating the page is reachable. VirusTotal reports 16 of 91 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The domain is listed on at least one security blocklist and has been blocked by PhishDestroy, confirming active detection by mitigations. The scam type is identified as Banking Phishing, targeting customers of Union Bank International. While the exact page content has not been examined, the combination of a credible‑looking title, recent registration, low‑reputation hosting, and multiple vendor detections indicates a high‑risk phishing operation. Defenders should add uniobnn.com to deny‑list policies, monitor for related indicators such as the hosting IP and nameservers, and educate users to avoid any unsolicited communications referencing Union Bank. Continuous observation of traffic to the IP and periodic re‑scans are recommended to capture any evolution of the threat.