# cabattle.com — SUSPICIOUS

> cabattle.com shows signs of phishing activity. Stay alert and avoid sharing personal info on this site while investigations continue.

## Summary
PhishDestroy has identified cabattle.com as a domain exhibiting potential phishing behavior, currently classified under generic phishing threats. Although not conclusively malicious, this domain warrants caution as investigations proceed. The domain was registered recently on April 27, 2025, which aligns with typical threat actor tactics of using fresh domains to evade detection.

Technical analysis reveals cabattle.com resolves to IP address 188.114.97.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has occasionally been associated with suspicious registrations. VirusTotal scans have returned zero detections across 95 security vendors, indicating no current widespread recognition as harmful. However, the combination of a new domain age, registrar profile, and phishing classification suggests the possibility of emerging malicious use.

At present, cabattle.com remains active and under investigation by PhishDestroy analysts. Users are advised to exercise caution and refrain from interacting with the site or submitting any sensitive data. Monitoring continues to determine whether this domain will be confirmed as a phishing threat or deemed benign. PhishDestroy will update its community as more intelligence becomes available.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CaseBattle — Официальные Кейсы CS2 | Апгрейды, Контакты и многое другое!

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Global Domain Group LLC
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["donna.ns.cloudflare.com", "rex.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc2d4-0ba0-7229-9893-261476cc74cb.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/cabattle.com
- Wayback Machine: https://web.archive.org/web/https://cabattle.com
- PhishDestroy: https://phishdestroy.io/domain/cabattle.com/
- LLM endpoint: https://phishdestroy.io/domain/cabattle.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cabattle.com/
Last updated: 2026-03-19