reCAPTCHA
Google reCAPTCHA is the most widely deployed CAPTCHA service, used to block automated abuse on forms, logins and signups. ScanMalware detects it from the reCAPTCHA API script and challenge iframe.
Its presence indicates anti-automation protection. Phishing kits also embed reCAPTCHA to look legitimate and to slow down automated analysis, so it should always be read alongside the full scan.
Commonly deployed alongside reCAPTCHA
Of the 18,611 public scans where reCAPTCHA was detected, these are the technologies most often present on the same site. The share is the percentage of reCAPTCHA sites that also ran each one.
| Technology | Category | Share of reCAPTCHA sites |
|---|---|---|
| Cloudflare | wappalyzer | 80.03% |
| Cloudflare Turnstile | wappalyzer | 65.19% |
| X-UA-Compatible | miscellaneous | 62.64% |
| Cloudflare Bot Management | wappalyzer | 56.34% |
| HTTP/3 | wappalyzer | 32.65% |
| HSTS | wappalyzer | 25.73% |
| Open-Graph-Protocol | miscellaneous | 25.45% |
| jQuery | wappalyzer | 21.03% |
| Google Analytics | wappalyzer | 20.49% |
| hCaptcha | wappalyzer | 18.79% |
| JQuery | miscellaneous | 15.4% |
| Google Tag Manager | wappalyzer | 14.81% |
| PoweredBy | miscellaneous | 14.58% |
| Google Cloud | wappalyzer | 14.03% |
How ScanMalware detects reCAPTCHA
reCAPTCHA is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that reCAPTCHA is present, but how it is being used. Open the full search interface for reCAPTCHA →
Recent public scans featuring reCAPTCHA
A rolling sample of recent public scans where reCAPTCHA was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| Suspected Malware | Cloudflare http://u2axa-ds6-enoz-s15x-kdq8bx.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare http://u730-897-ivj-1e39ky-z4n-y2r.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare https://u730-897-ivj-1e39ky-z4n-y2r.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare https://ua6lr-1aao-mlre7f-nnj-p2b.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare http://ua6lr-1aao-mlre7f-nnj-p2b.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare https://uars2-m84q43-m0w-54y-t464o.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare http://uars2-m84q43-m0w-54y-t464o.pages.dev/ | 2026-09-20 |
| Suspected Malware | Cloudflare https://uuvo-cxe-mx8-q5d6n-wh6qts.pages.dev/ | 2026-09-20 |
Frequently asked questions about reCAPTCHA
- Does using reCAPTCHA mean a website is unsafe?
- No. reCAPTCHA is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using reCAPTCHA can be perfectly safe or actively malicious.
- How many sites using reCAPTCHA has ScanMalware scanned?
- reCAPTCHA has been detected in 18,611 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with reCAPTCHA?
- Across scanned sites, reCAPTCHA is most often seen alongside Cloudflare, Cloudflare Turnstile and X-UA-Compatible. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.