stokcas[.]com

On July 25, 2026 investigators observed that the domain stokcas.com was taken offline but continues to be listed as a malicious site. The domain, created on August 27, 2025 and registered through Web Commerce Communications Limited, resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. Both authoritative nameservers, david.ns.cloudflare.com and violet.ns.cloudflare.com, point to Cloudflare infrastructure, indicating the operator leveraged a reputable CDN to hide origin details. The site presented the page title "Stokcas: Most Popular Online Crypto Casino Based on Blockchain" and is associated with a "Gambler Scam" phishing kit, classifying the activity as a crypto‑focused scam.

No SSL certificate was found, leaving the site exposed to plaintext traffic interception. Security assessments show a Gridinsoft trust score of 0 out of 100, and the domain appears on one security blocklist. It was blocked by PhishDestroy and flagged by one of ninety‑five VirusTotal scanners, confirming at least one vendor detected malicious behavior.

The current offline status does not guarantee future inactivity; similar domains may be provisioned using the same registrar or hosting. Defenders should continue to block the domain and its IP, monitor Cloudflare‑associated IP ranges for re‑use, and incorporate the page title and kit identifier into detection rules. Ongoing surveillance of newly registered domains from the same registrar and of any resurgence of the IP address is recommended to pre‑empt potential re‑deployment.