VirusTotal
4 / 92 engine detections
Ouvrir le rapport“Online Crypto Casino, Sports Betting & Prediction Markets”
Arnaque de casino crypto: blazewinners.com — Dernier actif connu (HTTP 200). Résumé des preuves: VirusTotal 4/92 (CRDF, Forcepoint ThreatSeeker, Gridinsoft…
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
4 / 92 engine detections
Ouvrir le rapport3 community references
Ouvrir le rapportprovider verdict: clean
Ouvrir le rapportNo threat flag
Ouvrir le rapportNo malicious flag
Ouvrir le rapportResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
blazewinners.com presents itself as an all-in-one "Online Crypto Casino, Sports Betting & Prediction Markets" platform, but PhishDestroy classifies it as a fraudulent gambling site. It targets cryptocurrency holders drawn in by fast betting and big promised payouts. We first flagged it on 2026-10-15, and as of 2026-10-19 the site was still online with its betting pages live.
The site runs on a kit we track as Gambler Scam, a template for spinning up convincing casino and sportsbook storefronts quickly. Schemes of this type usually lure players with sign-up bonuses or promo codes and ask for a crypto deposit to start playing. The account balance then shows wins that look real, but cashing out is blocked by surprise withdrawal fees, verification deposits or wagering conditions that never end. Victims lose everything they deposit plus any fees they pay trying to release a balance that never existed.
On 2026-10-19, VirusTotal showed 4 of 92 engines flagging the domain: CRDF, Forcepoint ThreatSeeker, Gridinsoft and VIPRE. That is a low count, which is typical for a site only days old, so most browsers and security tools will not warn visitors yet. The domain also appears in 3 AlienVault OTX threat pulses, and PhishDestroy lists it on its own blocklist.
The domain was registered on 2026-10-11 through CNOBIN INFORMATION TECHNOLOGY LIMITED, only four days before we detected it. That quick turnaround fits a site built to collect deposits before reputation systems catch up. Traffic passes through Cloudflare (AS13335) in the US, which hides the real origin server. The padlock comes from a free Let's Encrypt certificate, so it only shows that the connection is encrypted and says nothing about whether the operator can be trusted.
Do not deposit anything, and never pay a "withdrawal fee" or "verification deposit" to unlock winnings, because that money is lost too. If you already sent funds, save the transaction hashes, deposit addresses and screenshots of your account. Report them to the exchange you sent from and to your local cybercrime unit. Expect follow-up offers from "fund recovery" services and ignore them, since these are a common second scam. If you reused a password when signing up, change it everywhere you used it. Security teams should block the domain and watch for new lookalike casinos built on the same Gambler Scam template.
La réputation Edge-IP n’est pas attribuée à ce domaine.
marty.ns.cloudflare.comLocation describes the IP network.
d1787d4677602b1d7e5f0b6db0b8b0c1b84bd3d4404569ed506fe97cf84ca82aSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of blazewinners.com · checked Oct 15, 2026
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
http://blazewinners.com/https://blazewinners.com/Content-Type: text/html; charset=utf-8Server: cloudflareCache-Control: no-store, no-cache, must-revalidate, max-age=0CF-Cache-Status: DYNAMICno-store, no-cache, must-revalidate, max-age=0defaultDYNAMICa4abc794bc6bac54-YYZkeep-alivetext/html; charset=utf-8Thu, 15 Oct 2026 03:36:27 GMT{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}no-cache{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1v80eGRDWN6bt%2FWDWUvemsNTefz9OUjLuww0sWAJpWMmsbT%2B7Zi%2BgWIbzOjCEzguy5w5oU5%2FlNLEqi8%2BJJg12JfZtbhXEnqhir0Z05d%2FQb43Bj1Qvz347BGUDJEqDexRAwccloudflarecfCacheStatus;desc="DYNAMIC"chunkedValues retained by the collector; long values may be shortened during collection.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
blazewinners.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Inconnu→live_content
content_served
Inconnu→live_content
content_served
Inconnu→live_content
content_served
Inconnu→live_content
content_served
Inconnu→live_content
content_served
No threat flag
View source4/92 engine detections
View source3 community references
View sourceblazewinners.com
View sourceListed domains receive at least one abuse report; this entry has no retained notification history.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
blazewinners.com)Même si vous ne disposez pas de tous les détails — déposer quand même une plainte. Même des informations partielles peuvent aider les enquêtes.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerRapports de phishing récents et changements de disponibilité observés
SurveillerSurveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.