# casebattwe.com — SUSPICIOUS

> casebattwe.com is an active low-risk phishing domain. Avoid interactions and report suspicious emails referencing this site.

## Summary
PhishDestroy has identified casebattwe.com as an active phishing domain exhibiting low-risk threat characteristics. The domain is primarily used in generic phishing campaigns aimed at deceiving users into divulging sensitive information. While the overall risk level is assessed as low, users should remain cautious due to the potential for credential theft or fraud.

The domain casebattwe.com was registered recently on June 25, 2025, and resolves to IP address 104.21.6.11. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal analysis indicates minimal detection with only 2 out of 95 security vendors flagging this domain, suggesting limited but notable malicious activity. This infrastructure profile aligns with common phishing setups leveraging newly created domains and reputable registrars to evade immediate blocking.

Currently, casebattwe.com remains active and continues to pose a threat primarily through phishing attempts. PhishDestroy recommends users avoid clicking on links associated with this domain and organizations implement email filtering rules to block incoming messages referencing it. Continuous monitoring of casebattwe.com is advised to track any escalation in threat level or changes in campaign tactics.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Уникальная платформа, созданная для настоящих ценителей крутых предметов!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 104.21.6.11
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dahlia.ns.cloudflare.com hassan.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf1b-edc3-744d-9f90-2a8366f28602.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/casebattwe.com
- Wayback Machine: https://web.archive.org/web/https://casebattwe.com
- PhishDestroy: https://phishdestroy.io/domain/casebattwe.com/
- LLM endpoint: https://phishdestroy.io/domain/casebattwe.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casebattwe.com/
Last updated: 2026-03-16