optimumcapital[.]net

This domain, optimumcapital.net, is flagged as a high-risk phishing site targeting financial or investment sectors. Registered on May 1, 2024, through HOSTINGER operations, UAB, the domain resolves to IP address 185.244.151.84, hosted on AS60117 (Host Sailor Ltd) in Romania. Analysis indicates the site is actively serving content with an HTTP 200 status, suggesting operational phishing infrastructure. The page title, 'Home | Optimum Capital,' mimics legitimate investment or financial services, a common tactic in credential harvesting or fraudulent fund transfer schemes. Infrastructure analysis reveals the domain uses nameservers ns3.ro.hostsailor.com and ns4.ro.hostsailor.com, and its MX record points to itself with a priority of 0, which may facilitate direct email-based phishing campaigns. As of July 12, 2026, the domain is detected by 13 out of 95 security vendors on VirusTotal, with two security blocklists listing it as malicious. The SSL certificate, issued by Let's Encrypt, does not mitigate the threat, as phishing sites frequently use valid certificates to appear legitimate. Defenders should note the domain's low Gridinsoft trust score of 8/100, reinforcing its classification as malicious. The combination of a recent registration date, hosting on a known bulletproof provider, and active phishing indicators warrants immediate blocking at the network and endpoint levels. While the exact phishing kit or lure remains unconfirmed, the domain's structure and hosting align with known phishing campaigns targeting financial services. Organizations should monitor for connections to 185.244.151.84 and associated domains using the same nameservers or IP range.