# casebaltlle.com — SUSPICIOUS

> casebaltlle.com is an active low-risk phishing domain. Stay cautious and avoid sharing personal info on this site.

## Summary
PhishDestroy identifies casebaltlle.com as an active domain associated with generic phishing activity, currently assessed at a low risk level. Although the threat is not severe, caution is advised when interacting with this website due to its potential to deceive users.

The domain casebaltlle.com was registered recently on April 29, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 172.67.134.204. VirusTotal flags this domain by 1 out of 95 security vendors, indicating minimal but present suspicion. The combination of its new registration date and limited detection suggests this domain may be in early stages of phishing operations or under close monitoring.

Users are recommended to avoid entering sensitive information or clicking on links from casebaltlle.com. PhishDestroy continues to track this domain’s activity and advises organizations to implement standard anti-phishing measures, including email filtering and user education. Given its low but active threat status, vigilance remains crucial.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CaseBattle — инновационная платформа для истинных коллекционеров премиальных скинов!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.134.204
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: oaklyn.ns.cloudflare.com,yadiel.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf12-b1ff-71eb-9070-eef25d9d2fd9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ed25557d-ecac-45d3-87e6-71f22135b5e4
- Wayback Machine: https://web.archive.org/web/https://casebaltlle.com
- PhishDestroy: https://phishdestroy.io/domain/casebaltlle.com/
- LLM endpoint: https://phishdestroy.io/domain/casebaltlle.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebaltlle.com/
Last updated: 2026-03-19