Security Scan: Radware Bot Manager Captcha

Summary

This website contacted 8 IPs in 2 countries across 10 domains to perform 19 HTTP transactions. The main domain is validate.perfdrive.com and was registered NaN years ago.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZJvb9MwEMa%2FSuT3iZN22RarrVSSIVUaMLVsQrxBxr1pFv6H77IMPj12Cqi8Ga8s3d2je36Pb4XSmiC2Iz25PXwfAal4scahmBtrNkYnvESNwkkLKEiJw%2FbdrVhUtQjRk1fesDPJ6wqJCJG0d6zYDWv2ZXHdtX2zaNu6698MQ9O0y%2BG67br6pr7oby6vWPEAEdP8miV5EiGOsHNI0lEq1YvLsm7LZvmx6UR9JZYXn1kxJAbtJM2qJ6KAgvNpmioMMn6rlK%2FcT64myX2A5JAfDh%2F2cNQRFHELJLdGS%2BSfKEorteH6GBpW9N4h5J2v0anTkFBjjOkttQ1GK02seOujgjnkNXuUBiGj3KU09DP8rWz%2FhJOXjRbiAeKzVnC%2Fvz0Dga%2FZVvWS%2FP1msWCMdzx4pD1gyCbYZpU%2FQ8x5xY0MAUdNUOZiSVNc8fP26nQE7xPQbrjzyfOP7NjK%2F%2FDmij6Wj%2FOoSIYc6sSdSJKhqY8gKdFRHIHxzWnlv6e2%2BQU%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=I%2B7Yt1VNP7T4BgUJLJ0vQtCkwhak%2FYRHpQ%2BUp0O9YDo%2FsrcRAEJq%2FhVSWz%2Bv6PP%2BG04t1T0OT3AIQ8d9KW2aVeI1bQGmsrPqyplBtpVe7H0O9%2F%2FO1P1Uz9taO4b1fkTElQk91PK%2FZ2XbovykSDwM8uPGnWQxHT5nS9fTCFtb4JAx83WAEqI%2Bev4FIe6FiI7CIKH%2BVzWFaYk09VF%2Bm4eO0sa341X16RJMjm34LjC9BA2zVFnGx8mu7pVTxCWGjGKMK1j7RrSkI8vAfzNZJ0dOB04wl2JNf%2BZk%2FdsmaHkryvZFjyW0sGVlCMszZ2JxS96AsGLWcW4G80%2BcMHhNiFvfTA%3D%3D

Effective URL: https://validate.perfdrive.com/ad399369c6a7d9eba2306f2c6f5dea60/?ssa=8e4e5ed8-cc50-444f-9be6-5c7c84f696d5&ssb=24273235561&ssc=https%3A%2F%2Fsignin.spark.co.nz%2F%3Fgoto%3Dhttps%3A%2F%2Fwww.spark.co.nz%2Fxtramail%2Fcheckcookies%3FspEntityID%253Dappsuite-saml-twr%2526goto%253Dhttp%3A%2F%2Fopenam.internal.spark.co.nz%3A8080%2Fopenam%2Fsaml2%2Fcontinue%2FmetaAlias%2FXtramail%2Fidp1%3FsecondVisitUrl%25253D%2FSSORedirect%2FmetaAlias%2FXtramail%2Fidp1%3FReqID%2525253D_2895C125509CBDD1153D85990E04CE67%2526AMAuthCookie%253D%26brand%3Dxtramail&ssi=da5b79ea-cyoe-401f-abda-0b5a9bf1062c&[email protected]&ssm=33995030276166667104339904101276&ssn=c761a6685f4fdce492c502e4759104e65823454fd8ce-43e2-471d-8ac6f0&sso=0a6a177c-2e19bb1ad7f8a7da653a555d9ef7299da0cd3c7796e9fca1&ssp=19163649381778670135177861782746585&ssq=65589139926964446628599269766014913854348&ssr=MTc4LjYzLjE2LjIyNA==&sst=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/120.0.0.0%20Safari/537.36&ssu=&ssv=&ssw=&ssx=eyJyZCI6InNwYXJrLmNvLm56IiwidXpteCI6IjdmOTAwMGQzYTc0YjllLThjNzYtNGI4YS1iMmVlLWFlNDljZWU1NzQ5MzEtMTc3ODY5OTI2ODQyNzEyODAtZjU4MzRjYTgzYmJkNWVjZTEzIiwiX191em1mIjoiN2Y5MDAwNDU0ZmQ4Y2UtNDNlMi00NzFkLTg3N2MtMmUxOWJiMWFkN2Y4MS0xNzc4Njk5MjY5NzA3MC0wMDM3ZDBmMDhlZjlhMzdlMTdiMTAifQ==Redirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

The site shows high‑risk indicators, especially critical IDS alerts and a redirect to an untrusted domain, suggesting possible malware distribution.

Risk Factors

Critical and high severity IDS alerts

Redirect to untrusted domain

Low reputation ranking for a brand‑claimed domain

Dynamic JavaScript code generation (Function constructor)

Presence of a captcha page without legitimate user interaction

Domain age information unavailable

Details

Page Title

Radware Bot Manager Captcha

Scan Type

public

Language

🇺🇸

English

(57% confidence)

Screenshot

Page Load Overview

4.83s

Total Load Time

HTTP Requests

Domains

50 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:57%

Script Type:Latin

Text Length:217 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

54%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	104.19.230.21	United States	AS13335Cloudflare, Inc.
2	35.241.15.240	Kansas City, Missouri, United States	AS396982Google LLC
2	130.211.29.114	United States	AS396982Google LLC
2	66.22.91.48	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	104.18.13.205	United States	AS13335Cloudflare, Inc.
2	104.19.229.21	United States	AS13335Cloudflare, Inc.
2	66.22.63.144	Ashburn, Virginia, United States	AS25773RADWARE INC.
19	8	-	-