case-battle[.]trade

This domain is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. The domain was registered on April 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 5.253.61.77, which is located in Russia (Adminvps). The page title claims to be an official verified platform for CS2 case battles, written in Russian. SSL encryption is provided by a Let's Encrypt R13 certificate. Threat intelligence sources show limited but consistent malicious associations: AlienVault OTX includes this domain in one threat pulse, VirusTotal reports 1 detection out of 94 security vendors, and it appears on one security blocklist. The domain is already blocked by PhishDestroy. The Gridinsoft trust score is 0 out of 100, indicating strong distrust. Nameservers ns2.adminvps.net and ns1.adminvps.ru are used. The exact nature of the phishing operation is not fully characterized; the page content beyond the title has not been analysed, and no specific brand impersonation or scam kit has been identified from the available data. Defenders should treat this domain as confirmed malicious, block all outbound connections to it and its IP, monitor for any related subdomains or redirected traffic, and review logs for any prior interactions. Given the low detection rate among security vendors, additional analysis of the hosted content and any network communications would be prudent to fully scope the threat.