# casebattule.com — SUSPICIOUS

> casebattule.com is linked to low-risk generic phishing. Stay vigilant and avoid interacting with this domain. Protect your data now.

## Summary
PhishDestroy has identified casebattule.com as an active domain involved in generic phishing activities. Despite its low-risk classification, the domain poses a potential threat by attempting to deceive users into divulging sensitive information. Users should exercise caution and refrain from engaging with any suspicious content originating from this site.

The domain casebattule.com was registered recently on July 20, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with less stringent verification processes. It resolves to the IP address 104.21.71.188, which is hosted on infrastructure commonly utilized for content delivery networks, potentially to mask the true hosting location. VirusTotal analysis shows that 2 out of 95 security vendors have flagged the domain, indicating limited but notable suspicion among automated scanners.

Currently, casebattule.com remains active and continues to be monitored by PhishDestroy. Given its recent creation and phishing classification, users and organizations should implement blocking measures and educate personnel to avoid interaction with this domain. Continuous monitoring and timely updates from threat intelligence sources are recommended to mitigate any escalation in risk associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Редкие Коллекции и Уникальные Наборы - Идеально для настоящих коллекционеров и искателей находок

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 104.21.71.188
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: matt.ns.cloudflare.com priscilla.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf1b-ed5c-7236-b3fd-74906c6eb9eb.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/casebattule.com
- Wayback Machine: https://web.archive.org/web/https://casebattule.com
- PhishDestroy: https://phishdestroy.io/domain/casebattule.com/
- LLM endpoint: https://phishdestroy.io/domain/casebattule.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebattule.com/
Last updated: 2026-03-16