battle-case[.]at

Analysis indicates that battle-case.at is a domain associated with a CS:GO skin-gambling phishing scheme, currently offline as of July 23, 2026. The domain was registered on March 5, 2026, through Key-Systems GmbH and resolves to a Russian-hosted IP address, 212.192.14.27, operated by AS207713 (GLOBAL INTERNET SOLUTIONS LLC). Infrastructure review reveals the use of nameservers under the 4dns.su and 4ns.su domains, which have been previously linked to malicious activity. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and fraudulent sites, providing no definitive indication of intent.

The page title, 'Case-Battle :: У нас выигрывают крутые скины CS:GO,' explicitly references CS:GO skin gambling, a known vector for phishing and fraud targeting gaming communities. At the time of assessment, the domain appears on one security blocklist (PhishDestroy) and is flagged by 16 of 94 security vendors on VirusTotal, confirming detection by multiple threat intelligence sources. MX records suggest the presence of a mail server (mail.battle-case.at), though its operational status and role in the campaign are not confirmed. While the domain is currently offline, its infrastructure and detection history indicate a deliberate effort to deceive users into engaging with a skin-gambling scam.

Defenders should treat this domain as high-risk and monitor for reactivation or rebranding under similar naming conventions. No evidence links this domain to a specific phishing kit or additional brand impersonation beyond the CS:GO skin-gambling theme. Further analysis of associated infrastructure (e.g., nameservers, hosting provider) may reveal broader campaign patterns.