case-batlte[.]com

The domain case-batlte.com is a phishing site engaged in brand impersonation targeting Counter-Strike users. It presents itself as a skin-trading platform under the name 'CaseBattle' but is designed to harvest login credentials or other sensitive information from victims. No crypto drainer kit was identified, and the site is currently taken offline, though it previously posed an elevated risk due to its deceptive branding and active phishing operations.

Technical indicators confirm the malicious nature of case-batlte.com. The domain was flagged by 1 of 95 VirusTotal security vendors (Webroot) and appears on 1 security blocklist (PhishDestroy). Registered through NiceNIC International Group Co., Limited on March 05, 2026, it resolved to the IP address 104.21.93.29, hosted by Cloudflare, Inc. in the US. No SSL certificate was available, and the observed page title was in Russian, further indicating its targeting of non-English-speaking users. The domain used Cloudflare nameservers (langston.ns.cloudflare.com and nadia.ns.cloudflare.com) and had a Gridinsoft trust score of 0/100.

Victims who interacted with case-batlte.com should immediately change any passwords used on the site, enable two-factor authentication (2FA) on their accounts, and monitor for unauthorized transactions or login attempts. If Counter-Strike or Steam credentials were entered, users should review their account activity and revoke any suspicious sessions. The domain can be reported to Google Safe Browsing, PhishTank, or the impersonated brand’s security team for further investigation. Additionally, affected users may submit reports to local cybercrime authorities or consumer protection agencies.