useoptimusgs[.]com

On 24 July 2026 the domain useoptimusgs.com was observed as offline. The domain was registered on 7 February 2025 through Porkbun LLC and resolves to the IP address 198.202.211.1, which belongs to AS209242 operated by Cloudflare London, LLC in the United States. The hosting stack reports Nginx with OpenResty, a PHP runtime, Bootstrap front‑end framework, and Google Analytics tracking. The HTTPS certificate is issued by Let’s Encrypt (R12) and matches the domain name. DNS is served by four Porkbun name servers: curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, and salvador.ns.porkbun.com.

The page title returned by the site was “Home”, but no further content analysis is available. The site is classified as a crypto‑scam and as a brand‑impersonation campaign targeting the brand “across”. VirusTotal recorded 2 detections out of 95 scanned scanners, and the domain appears on two public blocklists, with active blocks reported by PhishDestroy and ScamSniffer. Gridinsoft assigned a trust score of 0 out of 100.

The overall risk rating is elevated. While the domain is currently taken offline, the infrastructure components—including the Cloudflare‑hosted IP address, the Let’s Encrypt certificate, and the observed technology stack—remain reusable for future campaigns. Defenders should add the domain and its associated IP address to network‑level deny lists, continue to monitor the four Porkbun name servers for new resolutions, and verify that any inbound traffic to the certificate‑bearing host is blocked. Ongoing watch‑lists should include the two blocklist identifiers that flagged this domain, and security teams should treat any future appearance of the same IP or certificate as potentially malicious given the prior crypto‑scam association.