iokcop[.]com

Analysis of iokcop.com indicates that the domain was registered on 21 February 2026 through Web Commerce Communications Limited operating as WebNic.cc. The authoritative name servers ns100.webnic.cc and ns101.webnic.cc resolve the domain to the IPv4 address 69.5.189.58, which is announced by AS42624 belonging to Global-Data System IT Corporation and geolocated to Switzerland. The site presented the page title “IOKCOP | Play at the best online casino based on Blockchain”, consistent with a cryptocurrency‑focused gambling lure. The SSL certificate was rated E6, a level often associated with low‑trust certificates.

Threat intelligence sources list the domain on one security blocklist and record a block by the PhishDestroy service. VirusTotal scans returned two positive detections out of ninety‑five vendors, confirming that at least a small subset of scanners identified malicious behavior. The campaign is attributed to a Gambler Scam phishing kit, reinforcing the hypothesis that the site was used to harvest credentials or financial information from users seeking blockchain casino services. Current observations show the domain is taken offline, which may be the result of takedown actions or temporary suspension.

Uncertainty remains regarding the full operational timeline, the extent of victim impact, and whether additional infrastructure such as command‑and‑control servers is associated with the same IP block. Defenders should continue to monitor the IP address and associated ASN for new domains, enforce blocklist entries, and consider adding the domain to internal deny lists. Network traffic to the resolved IP should be inspected for anomalous patterns, and any credentials or cryptocurrency wallet information that may have been submitted to the site should be assumed compromised and rotated. Ongoing correlation with other Gambler Scam kit indicators is recommended to accelerate detection of related campaigns.