casenus[.]com

The domain casenus.com poses a specific threat as a brand impersonation site targeting Counter-Strike, a popular video game franchise. The page title 'Navi Roulette' suggests the site was designed to mimic a gambling or reward platform associated with the professional esports team Natus Vincere (NAVI), likely to deceive users into entering credentials, payment information, or connecting their Steam accounts. This type of phishing campaign exploits user trust in well-known gaming brands to facilitate account theft, financial fraud, or malware distribution.

Technical evidence confirms the malicious nature of casenus.com. VirusTotal analysis shows 5 out of 95 security vendors flag this domain as malicious. The domain was registered through Web Commerce Communications Limited on September 28, 2025, and resolves to IP address 77.105.161.50. It appears on 1 security blocklist (PhishDestroy) and has a Gridinsoft trust score of 21 out of 100, indicating high risk. The domain is currently offline, but prior activity indicates active phishing operations. Infrastructure analysis reveals a relatively recent registration and a low trust rating, consistent with typical phishing domain lifecycles.

Users who visited casenus.com should immediately run a full antivirus scan on their device using updated security software. If any credentials, especially Steam or Counter-Strike account details, were entered, users must change those passwords immediately and enable two-factor authentication if available. Monitor financial accounts for unauthorized transactions and report any suspicious activity to relevant authorities. As the domain is now offline, no further interaction with it is possible, but vigilance against similar phishing domains remains advised.