Detect reCAPTCHA
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
Detection looks at script sources, javascript globals, dom selectors, inline scripts across 7 fingerprint rules among the site's public responses.
01
Websites using reCAPTCHA
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying reCAPTCHA. Individual fingerprint rule bodies are proprietary and are not published.
- Script sources
- JavaScript globals
- DOM selectors
- Inline scripts
03
Example public indicators for reCAPTCHA
Illustrative indicators derived from public catalog metadata for reCAPTCHA. A live scan may match additional proprietary rules beyond these examples.
- api-secure.recaptcha.net
- recaptcha_ajax.js
- recaptcha/apienterprise.js
- Recaptcha
- #recaptcha_image, iframe, div.g-recaptcha
- recaptcha/api.js
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known reCAPTCHA signature (7 rules) at the time of the scan.
- Does not establish
- A sitewide install of reCAPTCHA, an active vendor contract, exclusive use, or that reCAPTCHA is still in place today.
05
How to check a site for reCAPTCHA
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest reCAPTCHA signals.
- 2. PluginView reads only public responses (script sources, javascript globals, dom selectors) and scores them against the reCAPTCHA signature set (7 rules).
- 3. Review the confidence score and text explanation for reCAPTCHA on the results page.
06
FAQ: detecting reCAPTCHA
- Can PluginView detect reCAPTCHA without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for reCAPTCHA — typically script sources, javascript globals, dom selectors, inline scripts. It does not bypass authentication or paywalls.
- What category is reCAPTCHA?
- reCAPTCHA is classified under Security in the PluginView directory.
- How many fingerprint rules cover reCAPTCHA?
- This reference currently tracks 7 fingerprint rules across script sources, javascript globals, dom selectors, inline scripts. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses reCAPTCHA?
- Illustrative public indicators for reCAPTCHA include api-secure.recaptcha.net; recaptcha_ajax.js; recaptcha/apienterprise.js. A live scan may match additional proprietary rules beyond these examples.
