# casebaettle.com — SUSPICIOUS

> casebaettle.com is linked to active low-risk phishing. Users should remain alert and avoid interacting with suspicious content from this domain.

## Summary
PhishDestroy identifies casebaettle.com as an active generic phishing domain. Although this threat is assessed as low risk, phishing campaigns can deceive users into revealing sensitive information, making vigilance essential. The domain's recent creation in April 2025 suggests it may be part of a newly emerging threat landscape, warranting continued monitoring.

The domain resolves to IP address 172.67.216.18 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal flags only one out of ninety-five security vendors, indicating limited current detection but not negating potential phishing activity. The infrastructure points to a potentially transient setup that could facilitate phishing attempts via deceptive emails or fake websites.

Users are advised to exercise caution by avoiding clicking on unsolicited links or downloading attachments linked to casebaettle.com. Organizations should consider blocking or monitoring traffic to this domain and educate staff on identifying phishing tactics. Maintaining updated email filters and endpoint protections will help mitigate the risk associated with this active phishing campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CaseBattle — инновационная площадка для истинных коллекционеров премиальных скинов!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.216.18
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: aarav.ns.cloudflare.com,katelyn.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf0c-b16d-752a-9db5-67e108d57091.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7f97593a-792e-48ed-bfc6-2c83941f25dc
- Wayback Machine: https://web.archive.org/web/https://casebaettle.com
- PhishDestroy: https://phishdestroy.io/domain/casebaettle.com/
- LLM endpoint: https://phishdestroy.io/domain/casebaettle.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebaettle.com/
Last updated: 2026-03-19