finntechzooms[.]info

The domain finntechzooms.info is currently classified as a high‑risk brand‑impersonation campaign targeting Zoom. It was registered on April 2, 2026 through Unstoppable Domains Inc and uses the nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution points to IP address 34.42.100.71, which belongs to Google Cloud in the us-central1 region of the United States. The site presents the page title "Homepage - Finn Tech Zooms" and returns an HTTP 301 redirect, indicating that content is being forwarded elsewhere. TLS is provided by a Let's Encrypt R13 certificate, a common choice for short‑lived domains. Threat intelligence sources have recorded the domain in eight AlienVault OTX pulses and two of ninety‑four VirusTotal scanners have flagged it, while three independent blocklists (PhishDestroy, MetaMask, SEAL) already list it as malicious. The Gridinsoft trust score of zero further underscores the lack of reputation. Although the exact payload or credential‑capture mechanisms have not been publicly disclosed, the combination of brand impersonation, recent creation, cloud hosting, and multiple detections suggests a credible phishing operation. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP, and consider adding it to internal blacklists. Continued observation is advised to capture any evolving infrastructure or payload changes.