# casebaftle.com — SUSPICIOUS

> casebaftle.com is identified in a low-risk phishing scheme. Stay alert and avoid providing personal info on this suspicious site.

## Summary
PhishDestroy identifies casebaftle.com as a low-risk phishing domain aiming to deceive users with generic phishing tactics.

The domain was registered recently on May 24, 2025, via NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 104.21.73.209. VirusTotal flags it by 2 out of 95 engines, indicating some suspicion but limited consensus.

Users should avoid interacting with this domain. Its status remains active, and caution is advised to prevent data compromise or credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Уникальная платформа, созданная для настоящих ценителей крутых предметов!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 104.21.73.209
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: jasper.ns.cloudflare.com magdalena.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf0e-89f2-705c-a81c-3d2ba88702a3.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/casebaftle.com
- Wayback Machine: https://web.archive.org/web/https://casebaftle.com
- PhishDestroy: https://phishdestroy.io/domain/casebaftle.com/
- LLM endpoint: https://phishdestroy.io/domain/casebaftle.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebaftle.com/
Last updated: 2026-03-16