Detect AWS WAF Captcha
AWS WAF Captcha helps block unwanted bot traffic by requiring users to successfully complete challenges before their web request are allowed to reach AWS WAF protected resources.
Detection looks at response headers, script sources across 2 fingerprint rules among the site's public responses.
01
Websites using AWS WAF Captcha
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying AWS WAF Captcha. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Script sources
03
Example public indicators for AWS WAF Captcha
Illustrative indicators derived from public catalog metadata for AWS WAF Captcha. A live scan may match additional proprietary rules beyond these examples.
- x-amzn-waf-action: captcha
- captcha.awswaf.com/
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known AWS WAF Captcha signature (2 rules) at the time of the scan.
- Does not establish
- A sitewide install of AWS WAF Captcha, an active vendor contract, exclusive use, or that AWS WAF Captcha is still in place today.
05
How to check a site for AWS WAF Captcha
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest AWS WAF Captcha signals.
- 2. PluginView reads only public responses (response headers, script sources) and scores them against the AWS WAF Captcha signature set (2 rules).
- 3. Review the confidence score and text explanation for AWS WAF Captcha on the results page.
06
Commonly implies
A confirmed AWS WAF Captcha match also implies these technologies are present.
07
FAQ: detecting AWS WAF Captcha
- Can PluginView detect AWS WAF Captcha without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for AWS WAF Captcha — typically response headers, script sources. It does not bypass authentication or paywalls.
- What category is AWS WAF Captcha?
- AWS WAF Captcha is classified under Security in the PluginView directory.
- How many fingerprint rules cover AWS WAF Captcha?
- This reference currently tracks 2 fingerprint rules across response headers, script sources. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses AWS WAF Captcha?
- Illustrative public indicators for AWS WAF Captcha include x-amzn-waf-action: captcha; captcha.awswaf.com/. A live scan may match additional proprietary rules beyond these examples.
