casebcattle[.]com

The domain casebcattle.com has been identified as a crypto drainer scam targeting users of gaming skin trading platforms. Analysis indicates the site impersonates legitimate case-opening services to deceive victims into connecting cryptocurrency wallets, subsequently draining funds through malicious smart contracts. As of the latest verification, the domain is offline, though its infrastructure remains a documented threat. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, an unusually future-dated creation that may indicate domain squatting or evasion tactics. It resolves to the IP address 188.114.96.3, a Cloudflare-protected endpoint commonly used to obscure hosting origins. Detection metrics show 4 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its classification as a high-risk asset. Technologies detected include Unpkg, Cloudflare Browser Insights, and HTTP/3, suggesting a modern, obfuscated attack framework. Current status confirms the domain has been taken offline, likely in response to detection and blocking by security entities. However, the underlying threat persists, as crypto drainers often resurface under new domains or IP rotations. Users are strongly advised to verify all gaming-related platforms through official sources before connecting wallets or entering credentials. Security teams should monitor for domains registered under the same registrar or resolving to the identified IP, as these may indicate related malicious infrastructure. Wallet addresses and transaction hashes associated with this campaign should be cross-referenced with blockchain explorers to identify and blacklist further fraudulent activity.