The scan of www.chip.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.chip.de?

2 analysed samples communicate with this URL.

How was www.chip.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.chip.de - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned www.chip.de and returned a unknown verdict (score -12). The page resolved to 23.48.247.237 on Akamai Technologies, Inc. in AU. 17 domains and 2 IPs were contacted, over 5 HTTP requests. 2 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://c.de/
Domain: www.chip.de · IP: 23.48.247.237 · AS20940 · AU
Page title: CHIP – News, Tests, Downloads, Tech- & Verbraucherberatung
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 · valid to Nov 10 23: · subject C=DE, ST=Bayern, L=München, O=BurdaForward GmbH, CN=*.chip.de
Evidenced operator: BurdaForward GmbH
HTTP requests captured: 5
Scan tier: fast · observed 2026-08-22 09:33:11 UTC

Redirect chain

https://c.de/
https://www.chip.de/

Malware communicating with this URL (2)

These samples were observed contacting or being served from www.chip.de. Each links to its full analysis.

3b773d10fcf33409796b5baac503f2b2b5f2a522eabeffd81bef103fb96e3a85 - referenced · 3b773d10fcf33409796b5baac503f2b2 · first seen 2026-08-22
243872184-lbx__pt_br.js - referenced · 1d643e4b93da79c302afdc8dab7b357a · first seen 2026-08-16

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

23.48.247.237 - AS20940 Akamai Technologies, Inc. (Australia)
91.98.4.246 Hetzner Online GmbH (United Arab Emirates)

Observed indicators

www.chip.de
cmp.chip.de
a.bf-ad.net
quadro.burda-forward.de
www.chipstore.de
pick.chip.de
tarife.chip.de
www.youtube.com
www.instagram.com
www.tiktok.com
www.whatsapp.com
www.facebook.com
www.google.com
cdn.greenvideo.io
im.bestcheck.de
x.chip.de
www.mit-tier.de
23.48.247.237
91.98.4.246
https://www.chip.de/

Questions about www.chip.de

Is www.chip.de safe?: The scan of www.chip.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.chip.de?: 2 analysed samples communicate with this URL.
How was www.chip.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.chip.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan