claim-optimism[.]cfd

Analysis of the domain claim-optimism.cfd, created on 21 February 2026, shows that it is being used to conduct a crypto‑scam that impersonates the Optimism blockchain brand. The site resolves to the IPv4 address 185.111.111.158, which is registered to AS212238 (Datacamp Limited) and geolocated to Germany. An SSL certificate with an E8 rating is present, indicating a low‑trust certificate. Reputation services flag the domain as highly malicious: VirusTotal reports 16 of 95 scanning engines flagging it, and AlienVault OTX includes it in one threat‑intel pulse.

The domain appears on two public blocklists and has been added to the blocklists of PhishDestroy and ScamSniffer. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The infrastructure is currently offline, suggesting the site has been taken down or is otherwise inaccessible, but the indicators remain relevant for defensive posture.

Defenders should ensure that the IP address 185.111.111.158 is blocked at network perimeters, add claim-optimism.cfd to URL filtering and DNS sinkhole lists, and monitor for any re‑registration attempts. Continuous observation of the associated ASN (AS212238) and the hosting provider (Datacamp Limited) is advised, as malicious actors often reuse the same infrastructure. The combination of brand impersonation, a crypto‑scam payload, low SSL trust, and multiple vendor detections classifies the domain as an elevated‑risk threat requiring immediate remediation.