casoebattle[.]com

This domain, casoebattle.com, is identified as a credential harvesting phishing site targeting users through deceptive collection-themed lures. Analysis confirms its current status as offline, though prior activity included attempts to harvest login credentials under the guise of rare collectibles and unique sets. Infrastructure analysis reveals the domain was registered through NiceNIC International Group Co., Limited on March 05, 2026, resolving to the IP address 104.21.35.122. It is flagged by 2 of 95 security vendors on VirusTotal and appears on one active security blocklist. The domain holds a trust score of 0/100, with detected technologies including Unpkg, Cloudflare, AOS, and HTTP/3. The page title, written in Russian, translates to 'Rare Collections and Unique Sets - Perfect for true collectors and treasure hunters,' a common social engineering tactic. The domain is currently offline, but prior indicators suggest it was actively used for phishing operations. Organizations and users are advised to verify any prior interactions with this domain, monitor for related IOCs, and ensure endpoint protections are updated to block known malicious infrastructure. Network administrators should review logs for connections to 104.21.35.122 and consider adding the domain to internal blocklists for proactive defense.