caserbattle[.]com

The domain caserbattle.com has been confirmed as a phishing site targeting users of skin-trading platforms. Analysis indicates this is a fraudulent imitation of legitimate gaming asset marketplaces, designed to deceive users into submitting account credentials or transferring virtual items under false pretenses. The site is currently offline, though prior activity suggests it operated as a credential harvester or asset drainer. Infrastructure analysis reveals the domain was registered on March 05, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.97.3 and has been flagged by 13 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100. Detected technologies include Unpkg, Cloudflare Browser Insights, Cloudflare, AOS, and HTTP/3, which are consistent with modern phishing infrastructure designed to evade detection and mimic legitimate services. Current status indicates the domain is offline, though threat actors may reactivate it or migrate to a new domain. Organizations and users are advised to block the domain and associated IP address at the network level. Security teams should monitor for references to the domain in logs, particularly those related to gaming platforms or virtual asset transactions. End users should be educated on recognizing fraudulent skin-trading sites, including verifying domain registration dates, checking for HTTPS certificates, and cross-referencing with official platform communications.