--- title: "Download list of all hCaptcha sites" description: "Every website running hCaptcha, with domain, DNS, WHOIS, IP address, hosting country and global rank on each row. One file, rebuilt daily." url: https://webatla.com/technology/hcaptcha --- [Home](https://webatla.com/) › [Technologies](https://webatla.com/technology) › [Security](https://webatla.com/technology?category=Security) › hCaptcha ![hCaptcha logo](https://webatla.com/assets/tech-logos/hcaptcha.png) # Download websites that use hCaptcha 286,761 live sites using hCaptcha right now Security · by Intuition Machines · since 2019 · Proprietary 287K sites, Dataset updated · 2026-10-27 Categories [Security](https://webatla.com/technology?category=Security) [🔒 Get the list](https://webatla.com/technology/hcaptcha#preview) Requires a dataset purchase [About hCaptcha](https://webatla.com/technology/hcaptcha#overview) [Database preview](https://webatla.com/technology/hcaptcha#preview) [By country](https://webatla.com/technology/hcaptcha#by-country) [By TLD](https://webatla.com/technology/hcaptcha#by-tld) [Versions](https://webatla.com/technology/hcaptcha#versions) [Download](https://webatla.com/technology/hcaptcha#download) All figures as of Oct 27, 2026 All figures here come from one snapshot of the webatla database, taken on this date (UTC). We usually refresh it every day. 286,761, Sites detected 0.1%, Of all websites 1, Most used version ## Preview hCaptcha site datasets hCaptcha detection is a value inside the **Technologies** column. Two datasets carry it. **Technologies · €159 / month · 286,761 rows · 14 columns · webatla-technologies-hcaptcha-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | tiktok.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 2.21.65.27 | [DE](https://webatla.com/country/de) | {…} | 2026-09-19 | PWA, HSTS, Nginx, HTTP/2, PayPal, Emotion, HubSpot, Klaviyo, Zendesk, hCaptcha | 0.00082663 | 21,460,974 | 1996-07-21 | 2027-07-20 | | joomla.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.26.14.15 | [US](https://webatla.com/country/us) | {…} | 2026-10-20 | Google Analytics UA-544070-3 , Google Tag Manager GTM-WWC8WL , PHP, HSTS, HTTP/2, Joomla, Favicon, YouTube, hCaptcha, Bootstrap | 0.0000239765 | 18,866,330 | 2005-08-21 | 2029-08-21 | | neocities.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 23.143.32.1 | [US](https://webatla.com/country/us) | {…} | 2026-10-09 | HSTS, HTTP/2, jQuery 1.11.0 , Favicon, hCaptcha 1 , Bootstrap, Amazon SES, Open Graph, Proton Mail, Amazon Web Services | 0.0000108878 | 19,140,084 | 2013-05-24 | 2033-05-24 | | wikimediafoundation.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 192.0.66.2 | [US](https://webatla.com/country/us) | {…} | 2026-09-21 | PHP, RSS, HSTS, MySQL, Nginx, HTTP/2, Swiper, jQuery, Favicon, hCaptcha | 0.0000078056 | 19,290,862 | 2003-07-19 | 2027-07-19 | | discord.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.128.233 | [US](https://webatla.com/country/us) | {…} | 2026-10-13 | Google Analytics G-Q149DFWHT7 UA-53577205-2 +1 , HSTS, Slack, HTTP/3, Sentry, jQuery 3.5.1 , Favicon, HubSpot, Webflow, Zendesk | 0.000240499 | 20,118,042 | 2000-11-06 | 2026-11-06 | **All data · €599 / month · 286,761 rows · 23 columns · webatla-all-data-hcaptcha-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | tiktok.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 2.21.65.27 | [DE](https://webatla.com/country/de) | {…} | 2026-09-19 | PWA, HSTS, Nginx, HTTP/2, PayPal, Emotion, HubSpot, Klaviyo, Zendesk, hCaptcha | 2026-10-15 | TRUE | {…} | 0.00082663 | 21,460,974 | 2026-07-19 | RDAP | 1996-07-21 | 2027-07-20 | 2026-06-19 | Gandi SAS | {…} | Domain is active | | joomla.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 104.26.14.15 | [US](https://webatla.com/country/us) | {…} | 2026-10-20 | Google Analytics UA-544070-3 , Google Tag Manager GTM-WWC8WL , PHP, HSTS, HTTP/2, Joomla, Favicon, YouTube, hCaptcha, Bootstrap | 2026-10-18 | TRUE | {…} | 0.0000239765 | 18,866,330 | 2025-08-10 | RDAP | 2005-08-21 | 2029-08-21 | 2025-08-09 | GoDaddy.com, LLC | {…} | Domain is active | | neocities.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 23.143.32.1 | [US](https://webatla.com/country/us) | {…} | 2026-10-09 | HSTS, HTTP/2, jQuery 1.11.0 , Favicon, hCaptcha 1 , Bootstrap, Amazon SES, Open Graph, Proton Mail, Amazon Web Services | 2026-10-18 | TRUE | {…} | 0.0000108878 | 19,140,084 | 2025-08-11 | RDAP | 2013-05-24 | 2033-05-24 | 2025-08-10 | NameCheap, Inc. | {…} | Domain is active | | wikimediafoundation.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 192.0.66.2 | [US](https://webatla.com/country/us) | {…} | 2026-09-21 | PHP, RSS, HSTS, MySQL, Nginx, HTTP/2, Swiper, jQuery, Favicon, hCaptcha | 2026-10-27 | TRUE | {…} | 0.0000078056 | 19,290,862 | 2026-07-18 | RDAP | 2003-07-19 | 2027-07-19 | 2026-06-22 | MarkMonitor Inc. | {…} | Domain is active | | discord.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.128.233 | [US](https://webatla.com/country/us) | {…} | 2026-10-13 | Google Analytics G-Q149DFWHT7 UA-53577205-2 +1 , HSTS, Slack, HTTP/3, Sentry, jQuery 3.5.1 , Favicon, HubSpot, Webflow, Zendesk | 2026-10-19 | TRUE | {…} | 0.000240499 | 20,118,042 | 2026-02-17 | RDAP | 2000-11-06 | 2026-11-06 | 2026-02-17 | Cloudflare, Inc. | {…} | Domain is active | [↓ Download preview (20 rows, free)](https://webatla.com/api/v1/sample/technology/hcaptcha?dataset=technologies) [Buy Technologies · €159 / month](https://webatla.com/account/checkout?dataset=technologies) ## hCaptcha sites by country | Country | Sites | Share | | --- | --- | --- | | 🇺🇸 [United States](https://webatla.com/country/us) | 176,884 | 65.2% | | 🇳🇱 [Netherlands](https://webatla.com/country/nl) | 21,155 | 7.8% | | 🇩🇪 [Germany](https://webatla.com/country/de) | 20,332 | 7.5% | | 🇫🇷 [France](https://webatla.com/country/fr) | 9,862 | 3.6% | | 🇬🇧 [United Kingdom](https://webatla.com/country/gb) | 5,867 | 2.2% | ## hCaptcha sites by TLD | TLD | Sites | Share | | --- | --- | --- | | [.com](https://webatla.com/tld/com) | 152,385 | 53.1% | | [.nl](https://webatla.com/tld/nl) | 19,401 | 6.8% | | [.site](https://webatla.com/tld/site) | 14,546 | 5.1% | | [.org](https://webatla.com/tld/org) | 10,826 | 3.8% | | [.de](https://webatla.com/tld/de) | 10,116 | 3.5% | ## Version distribution Detected hCaptcha versions across all 286,761 sites. | Version | Sites | Share | | --- | --- | --- | | **1** | 205,045 | 100.0% | ## The hCaptcha dataset Every site we've detected as running hCaptcha, with version, hosting, country, TLD and traffic rank. ### hCaptcha lives inside 2 datasets hCaptcha detection is part of **Technologies** (€159/mo) and **All data** (€599/mo). Buy either to filter the full 286,761-site list, or grab a free preview first. [See datasets](https://webatla.com/pricing) [↓ Download free preview (20 rows)](https://webatla.com/api/v1/sample/technology/hcaptcha?dataset=technologies) ## About hCaptcha ### At a glance - **Vendor:** Intuition Machines - **Website:** hcaptcha.com ↗ - **Language:** JavaScript - **License:** Proprietary - **First release:** 2019-01-01 Bot protection is usually whatever the form plugin or the platform happened to ship with. hCaptcha generally is not that default, and the deliberateness of the choice is what makes this population worth reading. Somebody replaced something that already worked, and replacements have reasons behind them. hCaptcha is a Security service launched in 2019 by Intuition Machines, delivered as a Proprietary hosted widget and embedded through JavaScript on the page. The service presents a challenge, decides whether the visitor is human, and returns a token the site verifies before accepting a submission. Functionally it is interchangeable with the incumbent alternative, which is exactly why the decision to switch carries information. The motives cluster into a few recognisable groups. Some operators want visitor signals to stop flowing to a large advertising company, either on principle or because a privacy assessment told them to. Some are in Europe and treat data transfer as a legal exposure. Some took the revenue share on offer. Some simply had a bad experience with abuse getting through the default. The resulting population skews toward privacy conscious operators, financial and cryptocurrency services, communities that attract determined abuse, and organisations whose legal function has an opinion about vendors. Anyone selling privacy tooling, European hosting, compliance services or anti abuse products is looking at an audience that has already demonstrated a willingness to swap a default vendor out. As of October 2026 we detect the widget on 286,761 sites, 176,884 of them in United States, with .com carrying the largest block of suffixes. The country column complicates the privacy reading somewhat, which is worth saying rather than smoothing over. A heavy presence in the same market as the incumbent suggests the decision is driven as much by cost, by abuse performance and by tolerance for the challenge experience as by data protection concerns. Version filtering does nothing useful on this technology. The service exposes an interface generation marker rather than a build number, so every detection looks alike and there is no upgrade curve to study. Detection has one significant limit here. The widget only loads on pages that carry a protected form, so a site that uses it exclusively on a login screen, a registration step or a checkout page can be missed entirely by a crawl that sees the front page. The count is a floor, and it is a floor biased toward sites that expose a contact or comment form publicly. The export gives one row per detected site with the domain, the country, the suffix and the detection date. That inverts the usual lookup, which starts from a domain you already know, and lets research start from the technology instead. ## Frequently asked questions How many websites use hCaptcha? webatla detects hCaptcha on 287K websites, refreshed daily, each with its domain, DNS, WHOIS, IP, country and ranking. Can I download the list of websites using hCaptcha? Yes, as structured JSONL. Grab a free sample first. What's included for each site, and how fresh is it? Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily. How do I find the websites using hCaptcha? Buy the technology dataset, then download the complete list of domains we detect using hCaptcha, re-exported every day. What else is in the hCaptcha technology data? Each row places hCaptcha next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking. Can I download just the sites using hCaptcha, or the whole database? Both. Every site running hCaptcha comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export. How do I download the list of websites using hCaptcha? Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running hCaptcha as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank. ## Get the full list of websites using hCaptcha Pick the dataset that covers what you need. Each one includes hCaptcha and downloads as JSONL, rebuilt daily. Technologies, 14 columns Full website tech stack per site: CMS, payments, analytics, frameworks. €159 / mo [Buy and download](https://webatla.com/account/checkout?dataset=technologies) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=technologies) All data, 23 columns Everything we have, in a single package. The full webatla universe. €599 / mo [Buy and download](https://webatla.com/account/checkout?dataset=all-data) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=all-data) Want to compare every dataset side by side? [Visit the pricing page](https://webatla.com/pricing) ## Related technologies [![HSTS logo](https://webatla.com/assets/tech-logos/hsts.png) HSTS Security · 53.6M sites](https://webatla.com/technology/hsts) [![Cloudflare Bot Management logo](https://webatla.com/assets/tech-logos/cloudflare-bot-management.png) Cloudflare Bot Management Security · 13.0M sites](https://webatla.com/technology/cloudflare-bot-management) [![reCAPTCHA logo](https://webatla.com/assets/tech-logos/recaptcha.png) reCAPTCHA Security · 4.1M sites](https://webatla.com/technology/recaptcha) [![DDoS-Guard logo](https://webatla.com/assets/tech-logos/ddos-guard.png) DDoS-Guard Security · 685K sites](https://webatla.com/technology/ddos-guard)