Security Scan Report: recaptcha.world

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 13 HTTP transactions. The main domain is recaptcha.world and was registered 1 month ago.

Submitted URL: https://recaptcha.world/v?s=60b18a96-f388-49dc-879e-f1d82227a19f&ip=192.42.116.14&h=data.xmartlicense.store&k=fw&u=/

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

A 15-day-old 'recaptcha.world' interstitial masquerading as a human-verification gate ('Powered by xPGuard') for an unrelated host. No forms, credential capture or malware found, but the brand-mimicking name and youth warrant caution.

Risk Factors (4)
Very new domain (15 days) used as a CAPTCHA/interstitial gateway for another site
Domain name mimics the widely recognised 'reCAPTCHA' verification brand while the page attributes itself to a different, obscure service ('xPGuard')
Anti-bot gate silently forwards visitors to a third-party host whose nature is unexplained
Multiple IDS alerts flagging traffic to the .world TLD as potentially bad (informational only)
Safety Factors (5)
No forms of any kind: no password, username, payment or disguised fields
No credential exfiltration or cross-origin form submissions detected
No malware, hunting rule, kit-roster or content-malware Indicators of Compromise
Page text itself states no account or personal details are requested; only a checkbox and local puzzle
All JavaScript served from the site's own domain; only Google Fonts as third-party resources
Domain age information unavailable

Details

Page Title

Human verification · data.xmartlicense.store

Scan Type

public

Domain Name Analysis

Within the .world top-level domain, 'recaptcha.world' is registered without a subdomain. Its registrable label 'recaptcha' stretches across 9 characters holding 3 vowels versus 6 consonants. Splitting it apart reveals two words: re, captcha. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

TT data.xmartlicense.store is protected by xPGuard ° Your IP address is 193.138.218.201 HUMAN VERIFICATION I'm not a robot Tick the box to confirm you are human. Why am | seeing this? Powered by...

Page Load Overview

0.87s
Total Load Time
499 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:758 chars
Detector Agreement:33%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.199.175Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3104.21.92.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
134--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15503A6317E140A36B9339369324A77C8F32551529A068778BAD6E004EFCD6F965F3E8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:6572d8aXpoyubvFXA7XUaxREQYWaPNpWOEXkVYI5A:evJA7EaxqQYLPkkVY5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38260:xBACULBrAOBkQhgtWFgHkwCiAqIgmACsFYzCEp+CeGCdErC6cgYKAwhgaQIQCORIBKJqdAgAIokhRDh0BwxAwYQgWriwKiIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc7c7e7cfffff
Perceptual Hash:b330cccfcf383066
Difference Hash:10689c9c48181000
Wavelet Hash:0f0f070323033f3f
Color Hash:N/A

Other Hashes

Crop Resistant:10689c9c48181000

Scan History

Scan history not available

Unable to load historical scan data