Status
❌ Scan blocked: We couldn't scan your site because it showed our bot a captcha or browser check instead of the page.
What happened
- We tried: https://az.gov/
- When: 10/25/26, 8:30 AM
- The site answered: HTTP 403
- What we saw: 3 consecutive failures: Browser-check (Cloudflare) page served instead of the page (HTTP 403)
Description
A non-standard code ScanGov uses when a site answers with a captcha or "checking your browser" page instead of the page that was asked for. A person with a browser usually gets through; an identified bot does not.
Problem
A bot-protection service in front of your site (a CDN, firewall or hosting feature) is challenging visitors it doesn't recognize. ScanGovBot identifies itself and follows robots.txt but cannot solve challenges, so the site's content can't be verified or shown here, and other good bots are probably being turned away too.
Recommendation
Ask whoever manages your hosting, CDN or firewall to let good bots through by name instead of challenging every unknown visitor. Learn more about what to allow.
Technical recommendation
Allow-list the ScanGovBot user-agent (or 44.236.34.143) in your bot-management rules so it is not served a challenge (Cloudflare: a WAF custom rule or Bot Fight Mode exception; SiteGround: the anti-bot AI setting; Imperva: a bot policy exception). Prefer rate limiting to challenging for automated traffic that identifies itself.
Details
- Site: az.gov
- Label: Challenge page
- Type: inaccessible
- Code: 996
ScanGovBot
Our scanner identifies itself as ScanGovBot. If your site uses a firewall or bot protection, allow it through: https://scangov.com/bot