Security Scan: Radware Bot Manager Captcha

Summary

This website contacted 9 IPs in 2 countries across 10 domains to perform 18 HTTP transactions. The main domain is validate.perfdrive.com and was registered NaN years ago.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdbhMxEIVfZeX7XXuTpSJWEmmbNFKkAlUCqOIGGWeqWvgPz2y38PTYG0Dhpr2yNDNHc77jWaJyNsp%2BoEd%2FgB8DIFXPznqUU2PFhuRlUGhQeuUAJWl57N%2FdylkjZEyBgg6WXUheVihESGSCZ9V%2Bu2Jfb%2For0S7mb7vr%2Bbbv5r3YzEW3E7vuur0Ru5lg1WdImOdXLMuzCHGAvUdSnnJJzK5q8aZuFx%2FbhWxnslt8YdU2MxivaFI9EkWUnI%2Fj2GBU6XujQ%2BN%2FcT0qHiJkh%2Fx4%2FHCAk0mgiTsg1VujkN9TUk4Zy80ptqzaBI9Qdr5Ep89DUg8p5bc2LlqjDbFqF5KGKeQVe1AWoaDc5TTME%2Fyr9H%2FDKcsGB%2BkI6clo%2BHS4vQCBb8VW85z9%2FWFxYG3wPAakA2AsJth6WT5DTnmltYoRB0NQl2JNY1ryy%2FbyfATvM9B%2Bexey55%2FFsVOv8JaKOdUP06jMhjyazJ1JsqFxk0BRpqM0AOPr88r%2FT239Gw%3D%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=btwwnNxoVxRPQN1ZNAb%2BV73JWwvpx25XbgkS1skrfBe%2B609pl9BtD23qZo3TrTzQiAeOyhEY35rwTVyF0hHAFrGDuVmUtLpNcKJVD5%2FlHSlZcFHptYKZE3e%2FgPPVFO97Qp%2FYHzgM7WUWzvimdo%2FWA9aN78I4swQN4CDR0%2FfiIYXxR%2F3NLwzixwNmV6FIKBfz3UImn9%2B%2BA10iEauSAd4bhoclrDpdveRV%2FqCyONBtjlIcnVnY5NVkXhPtkNvYtF3jQtpxOwaRwi7PDJ1PjkrL9xqogWgWQEK73fwR5OIIXSDJvWbvPOPbPkgUkpSBsC1rrsmGlW3D66fSz%2F0Vn2fejA%3D%3D

Effective URL: https://validate.perfdrive.com/ad399369c6a7d9eba2306f2c6f5dea60/?ssa=356b62a3-3210-4858-a34e-690ed2249c73&ssb=09658262507&ssc=https%3A%2F%2Fsignin.spark.co.nz%2F%3Fgoto%3Dhttps%3A%2F%2Fwww.spark.co.nz%2Fxtramail%2Fcheckcookies%3FspEntityID%253Dappsuite-saml-twr%2526goto%253Dhttp%3A%2F%2Fopenam.internal.spark.co.nz%3A8080%2Fopenam%2Fsaml2%2Fcontinue%2FmetaAlias%2FXtramail%2Fidp1%3FsecondVisitUrl%25253D%2FSSORedirect%2FmetaAlias%2FXtramail%2Fidp1%3FReqID%2525253D_EA6019384B3DA43A0C304F0F4B1E0F20%2526AMAuthCookie%253D%26brand%3Dxtramail&ssi=cf144262-cyoe-4776-be05-d77483c84a8b&[email protected]&ssm=08192996187033712101658903061924&ssn=59b22cb20751c475e8ea0d7388adf345871868459dd3-2ba5-4984-bdf491&sso=670f9101-68065e07984eafe6077e41b3c781bfbbf98ea82c63ddfc65&ssp=69325688221779231920177921847963816&ssq=36397871798342751970017983205391299388227&ssr=NjUuMjEuMTE0LjExNg==&sst=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/120.0.0.0%20Safari/537.36&ssu=&ssv=&ssw=&ssx=eyJyZCI6InNwYXJrLmNvLm56IiwidXpteCI6IjdmOTAwMDliZjllNTViLTgxZDktNGY0Ny1iN2FkLWJiMDAwOGExNmQ3ODEtMTc3OTIxNzk3OTYxNjQxNDAtNjEzNzFjMWM3ZmY5NTg5YjEzIiwiX191em1mIjoiN2Y5MDAwNjg0NTlkZDMtMmJhNS00OTg0LWIxMDEtNjgwNjVlMDc5ODRlMS0xNzc5MjE3OTgzNzU2MC0wMDMzYjlhOTQ1NWRlMDg1MjE2MTAifQ==Redirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

Legitimate captcha page; no malicious indicators detected.

Risk Factors

High JavaScript obfuscation score (CRITICAL) without malicious payload

Third‑party redirect to validate.perfdrive.com (unusual but not proven malicious)

Safety Factors

Well‑established domain age (4298 days)

No credential or payment collection

No IoC or IDS alerts

Only a captcha form with h‑captcha response field

Domain age information unavailable

Details

Page Title

Radware Bot Manager Captcha

Scan Type

public

Language

🇺🇸

English

(57% confidence)

Screenshot

Page Load Overview

21.98s

Total Load Time

HTTP Requests

Domains

47 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:57%

Script Type:Latin

Text Length:217 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

56%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	35.241.15.240	Kansas City, Missouri, United States	AS396982Google LLC
2	104.19.230.21	United States	AS13335Cloudflare, Inc.
2	104.18.12.205	United States	AS13335Cloudflare, Inc.
2	104.18.13.205	United States	AS13335Cloudflare, Inc.
2	104.19.229.21	United States	AS13335Cloudflare, Inc.
2	130.211.29.114	United States	AS396982Google LLC
2	66.22.91.48	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	66.22.63.144	Ashburn, Virginia, United States	AS25773RADWARE INC.
18	9	-	-