casebattle[.]net

Analysis of casebattle.net indicates active brand impersonation targeting CS2, a gaming-related platform. The domain was registered on February 26, 2025, through NiceNIC International Group Co., Limited, and currently resolves to IP address 185.178.208.172. It is flagged on two security blocklists (PhishDestroy and BLP-Malware) and appears in 23 threat intelligence pulses on AlienVault OTX, suggesting prior malicious associations. The page title, "CASE-BATTLE :: Официальный Сайт — CS2 Кейсы и Лучший Дроп из Них!," explicitly claims affiliation with CS2, reinforcing the impersonation classification. Infrastructure analysis reveals the use of Cloudflare and HTTP/3, alongside a Let's Encrypt SSL certificate, which are common in both legitimate and malicious domains. Trust scores from Gridinsoft (0/100) and Scamadviser (37/100) further indicate low reputation. While no detections were reported by the 95 vendors that scanned the domain on VirusTotal, this absence does not confirm safety. The domain remains active as of July 12, 2026, and defenders should treat it as a potential phishing endpoint targeting CS2 users. Monitoring for credential harvesting or fraudulent transactions is recommended, particularly given the domain's explicit branding in the page title. No additional technical indicators, such as ASN or hosting provider details, are currently available for further infrastructure analysis.