# casebatte.com — SUSPICIOUS

> casebatte.com, a low-risk phishing site impersonating CS2 case drops, is offline after limited detections. Learn why it's flagged and stay protected.

## Summary
PhishDestroy identifies casebatte.com as a low-risk generic phishing domain targeting users interested in CS2 case drops. The site attempts to lure victims by presenting itself as an official platform for CS2 cases and item drops, leveraging the gaming community's interest.

Supporting evidence includes its presence on one security blocklist and a Gridinsoft trust score of 0/100. VirusTotal flags it by two out of 95 security vendors, indicating some suspicion but limited detection overall. The domain resolved to IP 188.114.96.3 and was registered recently through NiceNIC International Group Co., Limited, with a creation date in March 2026. The page title in Russian suggests it was targeting Russian-speaking users interested in CS2 gaming content.

Currently, the domain is offline, which reduces the immediate risk to users. To mitigate potential exposure, users should avoid interacting with similar domains promising game-related rewards or cases, especially those with low trust scores or flagged by security solutions. Monitoring for new variations of this phishing tactic is advised, as threat actors often reuse themes popular within gaming communities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: CASE-BATTLE :: Официальный Сайт — CS2 Кейсы и Лучший Дроп из Них!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: earl.ns.cloudflare.com,stevie.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf18-3d07-715c-95d5-6d4a6cb8e9eb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a25106ef-ab76-4309-99e4-029ddc8ab4dc
- Wayback Machine: https://web.archive.org/web/https://casebatte.com
- PhishDestroy: https://phishdestroy.io/domain/casebatte.com/
- LLM endpoint: https://phishdestroy.io/domain/casebatte.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebatte.com/
Last updated: 2026-03-19