Security Scan: Radware Bot Manager Captcha

Summary

This website contacted 9 IPs in 2 countries across 10 domains to perform 18 HTTP transactions. The main domain is validate.perfdrive.com and was registered NaN years ago.

Submitted URL: https://www.spark.co.nz/cwa/openam/SSORedirect/metaAlias/Xtramail/idp1?SAMLRequest=hZLdahsxEIVfZdH9rlb%2BWdfCNqxtAoa0DXYbSm%2BKKk%2BIqFZSNLPZtE9fad0G9ya9EszMYc53NCtUnQ2y7enRHeGpB6TipbMO5dhYsz466RUalE51gJK0PLXvb%2BWkqmWInrz2ll1J3lYoRIhkvGPFYb9m37ZiKoRYbOezZiem20XbtM1SbGfNYj7ZL3c1K%2B4hYppfsyRPIsQeDg5JOUqletKU9bwUy091LcVMTt99ZcU%2BMRinaFQ9EgWUnA%2FDUGFQ8UelfeV%2BcT0o7gMkh%2Fx0%2BniEs4mgiXdAqrVGIf9CUXXKWG7OQbBi5x1C3vkWnb4MSd3HmN7SdMEabYgVNz5qGENeswdlETLKXUrDPMNrpf0bTl7WdxBPEJ%2BNhs%2FH2ysQ%2BJ5tVS%2FJ3x%2BWDqz1jgePdAQM2QTbrPJnyDGvuFEhYG8IylwsaYgrft1eXY7gQwI67O988vwzO%2B7Uf3hzxZzLh3FUJkMOTeJOJMnQsIugKNFR7IHxzWXlv6e2%2BQ0%3D&RelayState=https%3A%2F%2Fwebmail.xtra.co.nz%2Findex.cgi&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=KPTGBvVEdY367VmHfa3jndurG5LHv72kgoSUv7ns7lcrMHuPx%2FVfhQEJtwLFNMB2MhJZkqjUC5eQuXnx6kp6eyLu58n%2BzVj6rGx098wWjm4GlT%2Bgu4Lp5XEo9cVwKgVRZmLDsMZf1Ivfq26q5%2Fhh3Zu13ieTo2wncMX2%2B4CFDxO6SMH7kOVOo4C%2BF%2BP6495YBSad46wRFWfNKdOYmJBVb5%2FcP0VSkGTiy5MydAs4Ew%2FEC1%2F4nWzmcHJLxK0ndn3%2F0LGEEczO92lZXCNCnfCEhNEMXRFh6sSSZirnKVm4lPjVGvVH8e1OndHk5opqrGBEoAFG1Fi8rkbjmn7pVmusRg%3D%3D

Effective URL: https://validate.perfdrive.com/ad399369c6a7d9eba2306f2c6f5dea60/?ssa=633d3baf-5a8e-4479-a0ae-6e28129634fc&ssb=39095229098&ssc=https%3A%2F%2Fsignin.spark.co.nz%2F%3Fgoto%3Dhttps%3A%2F%2Fwww.spark.co.nz%2Fxtramail%2Fcheckcookies%3FspEntityID%253Dappsuite-saml-twr%2526goto%253Dhttp%3A%2F%2Fopenam.internal.spark.co.nz%3A8080%2Fopenam%2Fsaml2%2Fcontinue%2FmetaAlias%2FXtramail%2Fidp1%3FsecondVisitUrl%25253D%2FSSORedirect%2FmetaAlias%2FXtramail%2Fidp1%3FReqID%2525253D_B131117B546C13B7A6A691B46752D9C0%2526AMAuthCookie%253D%26brand%3Dxtramail&ssi=047eb108-cyoe-4a48-a526-3f087aeecf92&[email protected]&ssm=41652202742867143109516554340372&ssn=7845bef612748330663e7971b6f517d96ee410b327ec-2218-46ea-86b493&sso=839d6402-c73b552f99ff396d903b856fdea31b1d7336c509931b1d16&ssp=42527878231779143460177916409160328&ssq=97894014968908735338749689958085765354224&ssr=NjUuMjEuMTE0LjExNg==&sst=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/120.0.0.0%20Safari/537.36&ssu=&ssv=&ssw=&ssx=eyJfX3V6bWYiOiI3ZjkwMDAxMGIzMjdlYy0yMjE4LTQ2ZWEtODQwMi1jNzNiNTUyZjk5ZmYxLTE3NzkxNDk2ODkwNDkwLTAwMzJlYjRmODc5NDE5MThjODcxMCIsInJkIjoic3BhcmsuY28ubnoiLCJ1em14IjoiN2Y5MDAwZWFlYWUzOTgtYWFhNS00ODBmLTlmNGYtZDRkNGI0MGU1NTIwMS0xNzc5MTQ5Njg3NjI3MTQyMi1lNWU3N2M2MTAzZjQyNjQ0MTMifQ==Redirected

The Cisco Umbrella rank of the primary domain is #416,869 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

The site shows critical malware alerts and redirects to an untrusted domain despite being a well‑known brand, indicating a high‑risk malicious operation.

Risk Factors

Critical IDS alerts for possible malware exfiltration

Untrusted redirect to perfdrive.com

Low domain reputation for a well‑known brand

Dynamic JavaScript code generation (Function() calls)

Use of third‑party captcha services without clear justification

Domain age information unavailable

Details

Page Title

Radware Bot Manager Captcha

Scan Type

public

Language

🇺🇸

English

(57% confidence)

Screenshot

Page Load Overview

14.75s

Total Load Time

HTTP Requests

Domains

47 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:57%

Script Type:Latin

Text Length:217 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

57%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.19.230.21	United States	AS13335Cloudflare, Inc.
2	104.18.12.205	United States	AS13335Cloudflare, Inc.
2	66.22.91.1	Auckland, Auckland, New Zealand	AS48851Radware Ltd
2	35.241.15.240	Kansas City, Missouri, United States	AS396982Google LLC
2	104.19.229.21	United States	AS13335Cloudflare, Inc.
2	66.22.63.144	Ashburn, Virginia, United States	AS25773RADWARE INC.
2	104.18.13.205	United States	AS13335Cloudflare, Inc.
2	130.211.29.114	United States	AS396982Google LLC
2	66.22.91.48	Auckland, Auckland, New Zealand	AS48851Radware Ltd
18	9	-	-