# casebatltle.com — SUSPICIOUS

> casebatltle.com posed as a collectible skins platform to phish users. Avoid engagement; the domain is now offline and flagged for suspicious activity.

## Summary
PhishDestroy has identified casebatltle.com as a low-risk generic phishing domain masquerading as an innovative platform for premium skin collectors, as suggested by its page title in Russian. The site aimed to deceive users interested in digital collectibles, potentially to harvest credentials or other sensitive information.

Technically, casebatltle.com was registered on March 5, 2026, via NiceNIC International Group Co., Limited and resolved to IP address 104.21.16.185. The domain appears on one security blocklist and triggered alerts from 2 out of 95 VirusTotal vendors, indicating limited but notable suspicion. Gridinsoft assigned it a trust score of 0/100, reflecting a very low trustworthiness. These indicators combined suggest the domain was part of a minor phishing campaign targeting niche audiences.

Currently, casebatltle.com is offline and no longer resolving, effectively neutralizing its threat potential. PhishDestroy advises caution against any similar domains and encourages users to avoid sites mimicking collectible or gaming marketplaces. Continuous monitoring for variants or resurrected domains in this threat cluster is recommended to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CaseBattle — инновационная площадка для истинных коллекционеров премиальных скинов!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.16.185
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ophelia.ns.cloudflare.com,pete.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf16-649a-705b-b5bc-88e33e5d0eba.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/19e500bc-84c2-4c77-8d6b-e97eaa23f974
- Wayback Machine: https://web.archive.org/web/https://casebatltle.com
- PhishDestroy: https://phishdestroy.io/domain/casebatltle.com/
- LLM endpoint: https://phishdestroy.io/domain/casebatltle.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebatltle.com/
Last updated: 2026-03-19