Scan report · 4 days agoPublic

allianz.de

166.117.24.221AS16509 · US
Landed onhttps://www.allianz.de/· 3 redirects
Gated · Likely benign

An interaction gate (e.g. Cloudflare Turnstile) blocked full analysis — this verdict is based on pre-gate evidence.

Inconclusive: AntiBotChallenged

Verdict

Looks safe

Preliminary / could not fully load

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first
SupportingFaked CDN 'checking your browser' page

The page reproduces a CDN challenge interstitial (e.g. Cloudflare's 'Just a moment…') inside a hosted file, rather than being served by that CDN's edge. It is a lure skin used to make a redirect look like a routine security check.

Analyst noteA genuine Cloudflare/DDoS-Guard challenge is served by the CDN, not uploaded to object storage. Treat the faked chrome as a delivery signal, especially alongside a gated cross-origin redirect.

InfoBlocked by a bot-protection gate
cloudflare

A bot-protection challenge (e.g. Cloudflare Turnstile) blocked full analysis, so the verdict relies on pre-gate evidence (see the Gated Risk Assessment).

Analyst noteThe gate alone is NOT suspicious — many legitimate sites use it. Read the Gated Risk Assessment for the actual pre-gate risk.

InfoCross-domain scripts injected at runtime
1 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

The file was not analysed, so the scan carries no verdict on the file itself.

Gated Risk Assessment

This page sits behind a bot-protection gate (e.g. Cloudflare Turnstile / CAPTCHA), so automated analysis could not fully complete. The assessment below uses only the evidence gathered BEFORE the gate. No pre-gate risk signals fired — the gate by itself is not suspicious; this is most likely a legitimate site using bot protection.

Pre-gate risk score:0

Pre-gate signals

No pre-gate risk signals detected.

Path to gate (4 hops)

http3xxallianz.de
https://allianz.de/
http3xxwww.allianz.de
https://www.allianz.de/
http3xxallianz.de
https://allianz.de/
finalwww.allianz.de
https://www.allianz.de/

Turnstile Sitekey

0x4AAAAAAADnPIDROrmt1Wwj

Infrastructure

IP
166.117.24.221AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS
CN=Amazon ECDSA 384 M04, O=Amazon, C=US · expires Mar 30, 2027
Redirects
3 hops · / → /

Hashes & fingerprints

Page capture

Live

Title “Just a moment...”

Engines

6 · time to verdict

Page

HTTP
403 · AntiBotChallenged
Title
Just a moment...
Load
26.50 s · 13 requests
Stack · 4CloudflareCloudflare Bot ManagementHSTSHTTP/3