Detect Altcha

Security

Altcha is a spam and abuse protection solution for websites and apps, offering a privacy-friendly Captcha and other tools designed with GDPR compliance to provide strong security while safeguarding user privacy.

Detection looks at javascript globals, inline scripts across 2 fingerprint rules among the site's public responses.

01

Websites using Altcha

Loading website list…

02

Signal classes

PluginView evaluates public page signals in these classes when identifying Altcha. Individual fingerprint rule bodies are proprietary and are not published.

  • JavaScript globals
  • Inline scripts
03

Example public indicators for Altcha

Illustrative indicators derived from public catalog metadata for Altcha. A live scan may match additional proprietary rules beyond these examples.

  • ALTCHA_WIDGET_ATTRS
  • altcha.orgjs
04

What a detection means

Establishes
One or more public signals on the scanned page matched a known Altcha signature (2 rules) at the time of the scan.
Does not establish
A sitewide install of Altcha, an active vendor contract, exclusive use, or that Altcha is still in place today.
05

How to check a site for Altcha

  1. 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest Altcha signals.
  2. 2. PluginView reads only public responses (javascript globals, inline scripts) and scores them against the Altcha signature set (2 rules).
  3. 3. Review the confidence score and text explanation for Altcha on the results page.
06

FAQ: detecting Altcha

Can PluginView detect Altcha without logging in?
Yes. PluginView only reads publicly accessible responses when checking for Altcha — typically javascript globals, inline scripts. It does not bypass authentication or paywalls.
What category is Altcha?
Altcha is classified under Security in the PluginView directory.
How many fingerprint rules cover Altcha?
This reference currently tracks 2 fingerprint rules across javascript globals, inline scripts. Individual rule bodies are proprietary and are not published.
What public signals suggest a site uses Altcha?
Illustrative public indicators for Altcha include ALTCHA_WIDGET_ATTRS; altcha.orgjs. A live scan may match additional proprietary rules beyond these examples.

More in Security

View category →