zoominfinancial[.]com

This domain, zoominfinancial.com, was registered on 15 February 2025 through NameCheap, Inc. The site resolves to 104.21.41.27, an address owned by Cloudflare (AS13335) located in the United States. DNS is served by jermaine.ns.cloudflare.com and veda.ns.cloudflare.com, and the domain publishes an MX record (priority 10) pointing to mx.zoominfinancial.com, indicating a functional mail service. The public web server returns HTTP 200 and presents the page title “ZoomInFinancial | Latest Finance and Tech News and Updates”. Underlying technology stacks identified include WordPress, MySQL, PHP, Bootstrap, Amazon Web Services, Yoast SEO, Underscore.js, and SparkPost, confirming a typical content‑management environment hosted on AWS and fronted by Cloudflare.

Security telemetry shows the SSL certificate is issued by Google Trust Services under the WE1 root, providing a valid TLS handshake. VirusTotal records indicate that one out of ninety‑three scanning engines has flagged the domain, and the domain is listed on a single external blocklist, where it has also been added to the PhishDestroy blocklist. The domain is explicitly marked as impersonating the Amazon brand. While the presence of a legitimate‑looking certificate and a functional CMS reduces immediate suspicion, the combination of brand impersonation, a single vendor detection, and inclusion on a phishing blocklist suggests a malicious intent.

The limited detection count leaves uncertainty about the breadth of malicious payloads or credential‑harvesting pages that may be hosted behind the front‑end content. Defenders should add zoominfinancial.com to inbound and outbound filtering rules, monitor DNS queries for the domain and its MX host, and enforce TLS inspection to capture any hidden payloads. Continuous re‑evaluation of VirusTotal and other sandbox results is recommended, as additional detections may emerge.