# casbattle.org — SUSPICIOUS

> casbattle.org poses a medium-risk phishing threat impersonating a CS:GO skins site. Avoid it to protect your credentials and gaming assets.

## Summary
PhishDestroy identifies casbattle.org as a phishing domain masquerading as a CS:GO skins giveaway platform titled "CASE-BATTLE :: Официальный Сайт — У нас выигрывают крутые скины CS:GO." The domain attempts to lure users by promising valuable in-game items, a common tactic to harvest personal data or login credentials. This type of phishing can lead to account compromise or theft of digital assets.

Technically, casbattle.org resolves to the IP address 104.21.64.247 and was registered through NiceNIC International Group Co., Limited on March 4, 2026. VirusTotal flags this domain by 3 out of 95 security vendors, and it appears on at least one security blocklist, indicating known malicious activity. The site’s infrastructure is relatively recent and has limited but credible evidence of phishing attempts based on these detections and listings.

Currently, casbattle.org is taken offline, reducing immediate threat exposure. However, users should remain cautious as the domain could return or similar domains might appear. It is advisable not to visit this domain or provide any personal information if encountered. Using updated security software and consulting reputable blocklists can help users stay protected against such phishing scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CASE-BATTLE :: Официальный Сайт — У нас выигрывают крутые скины CS:GO

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.64.247
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: earl.ns.cloudflare.com stevie.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/s9vTTHZj/d194f4c2f4de.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/casbattle.org
- PhishDestroy: https://phishdestroy.io/domain/casbattle.org/
- LLM endpoint: https://phishdestroy.io/domain/casbattle.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casbattle.org/
Last updated: 2026-03-19