Bloxchase.com 声誉评测

HTTPS 根域返回 HTTP 200 和预期的 BloxChase 奖励平台。HTTP 和 www 均汇聚到同一 HTTPS 根域。桌面、移动、爬虫和 Gridinsoft 配置收到相同标题、大小和标准化结构，没有针对配置的替换。

• HTTP 状态 200
• 最终 URL https://bloxchase.com/
• 页面元素 BloxChase - Earn Free Robux
• 分析师观察 HTTP and www redirected only to the same HTTPS apex.
• 分析师观察 Four request profiles returned identical normalized page structure and the same 123373-byte response size.

根域和博客 sitemap 的 47 个唯一 URL 均在 bloxchase.com 返回 HTTP 200。没有页面触发无关跳转、iframe、meta refresh、自动下载或投递可执行文件/压缩包。有关 executor 的文章仅包含普通编辑链接。

• HTTP 状态 200
• 公开证据 URL https://bloxchase.com/sitemap.xml
• 公开证据 URL https://bloxchase.com/blog-sitemap.xml
• 分析师观察 47 of 47 current sitemap URLs returned HTTP 200 at same-site final URLs.
• 分析师观察 No reviewed public response initiated an off-site redirect, iframe, meta refresh, automatic download, executable delivery, or archive delivery.
• 分析师观察 Third-party executor references appeared as ordinary editorial links in warning and explanatory articles, not as automatic navigation or software delivery.

所审查 Roblox 流程要求公开用户名、显示公开资料，并在新设备上要求 BloxChase PIN/密码或电子邮件/Google 登录。它没有要求 Roblox 密码/cookie、一次性代码或银行卡。

• HTTP 状态 200
• 页面元素 What is your username?
• 页面元素 This device is not remembered yet. Use your existing BloxChase PIN/password, or choose Google/email login instead.
• 分析师观察 The Roblox lookup requested only the public username and profile confirmation.
• 分析师观察 No reviewed BloxChase form requested a Roblox password or Roblox security cookie.
• 分析师观察 No authentication credential was submitted during the review.

公开页面说明了来自 TheoremReach、ayeT Studios 和 OGAds 的广告资助调查、游戏、app 任务和下载。优惠因账户、国家、设备和库存而异。受保护页面要求登录；未测试任何优惠、交易、付款或目的地。

• 最终 URL https://bloxchase.com/auth/login.php
• 页面元素 Choose games, apps, surveys and tasks from the providers available for your device and country.
• 页面元素 TheoremReach, ayeT Studios, and OGAds
• 分析师观察 The public pages disclose that offer availability and destinations vary by account, country, device, and provider inventory.
• 分析师观察 No authenticated offerwall, app task, payout, transaction, or provider destination was tested.

被申诉主机就是可注册根域。根域和 www 通过 Cloudflare 解析。证书还显示 mail、webmail 和 server 位于另一地址；有限检查中均返回 HTTP 200，未出现无关跳转或有害对象。

• DNS 信息 bloxchase.com and www.bloxchase.com resolved through Cloudflare during the review.
• 证书信息 Current certificate records covered bloxchase.com, *.bloxchase.com, mail.bloxchase.com, webmail.bloxchase.com, and server.bloxchase.com.
• DNS 信息 mail.bloxchase.com, webmail.bloxchase.com, and server.bloxchase.com resolved to 85.137.248.188 during the review.
• 分析师观察 The exact appealed host and registrable parent are both bloxchase.com.

身份验证响应设置了 HttpOnly 和 SameSite=Lax，但没有 Secure；也没有 HSTS、CSP 和明确框架限制。这些是加固机会；未尝试或观察到会话窃取、注入或 clickjacking。

• 分析师观察 Authentication cookies included HttpOnly and SameSite=Lax but lacked the Secure attribute.
• 分析师观察 The reviewed responses did not advertise Strict-Transport-Security, Content-Security-Policy, or X-Frame-Options.
• 分析师观察 No exploit of the missing browser-hardening controls was attempted or observed.

URLScan 列出 2026 年 2 月至 8 月的五个 https://bloxchase.com/ 公开扫描，均为 HTTP 200。OTX 有零个 pulse 和两个 HTTP 200 根域观察。Internet Archive 没有快照。可访问索引未披露具体有害对象。

• 分析师观察 URLScan public search listed five root-page scans dated 2026-02-04 through 2026-08-13, all with HTTP 200.
• 分析师观察 OTX exposed zero threat pulses and two root URL observations with HTTP 200.
• 分析师观察 Internet Archive returned no archived snapshot for bloxchase.com during the bounded query.
• 分析师观察 Accessible exact-host sandbox, URL-abuse, threat-intelligence, and public web searches did not expose an exact malicious URL, file, payload, hash, or execution trace.

审查未收到或复现可归因于 bloxchase.com 的确切恶意 URL、钓鱼接收端、文件、载荷、漏洞利用、命令、哈希、自动有害跳转或执行轨迹。宽泛域名分类不等于观察到的对象。

• 分析师观察 The reviewed root, authentication flow, and 47 current public sitemap URLs did not produce an exact harmful URL, credential receiver, file, payload, hash, or execution trace.
• 分析师观察 The remaining external warning identified the domain category but did not expose a concrete BloxChase URL, response, file, payload, hash, or sandbox trace.