optima[.]cc

Analysis indicates that the domain optima.cc is an active credential-phishing infrastructure first registered on May 16, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain currently resolves to 188.114.96.3, an address assigned to CloudFlare, Inc. in Canada, and is fronted by Cloudflare nameservers ali.ns.cloudflare.com and pablo.ns.cloudflare.com. A 302 HTTP redirect is observed, suggesting the site may be redirecting visitors to a login or data-collection page. The page title 'Optima - Home' does not explicitly identify a targeted brand, and no confirmed phishing kit or specific victim brand has been attributed in available intelligence. The domain appears on one security blocklist and is referenced in a single AlienVault OTX pulse, indicating limited but confirmed detection in threat-sharing communities. Two of ninety-two security vendors on VirusTotal flag the domain as malicious. The SSL certificate is issued by Google Trust Services, serial number WE1, a common configuration for both legitimate and malicious sites leveraging Cloudflare. Gridinsoft assigns a trust score of 10 out of 100, further supporting the assessment of high risk. Defenders should treat optima.cc as an active phishing threat. Network-level blocking of the domain and its resolved IP is recommended. Further analysis of the redirect chain and any associated login pages is advised to determine the exact credential-harvesting mechanism and targeted services. No evidence currently suggests this infrastructure is inactive or benign.