--- title: "Download list of all reCAPTCHA sites" description: "Every website running reCAPTCHA, with domain, DNS, WHOIS, IP address, hosting country and global rank on each row. One file, rebuilt daily." url: https://webatla.com/technology/recaptcha --- [Home](https://webatla.com/) › [Technologies](https://webatla.com/technology) › [Security](https://webatla.com/technology?category=Security) › reCAPTCHA ![reCAPTCHA logo](https://webatla.com/assets/tech-logos/recaptcha.png) # Download websites that use reCAPTCHA 4,055,825 live sites using reCAPTCHA right now Security · by Google · since 2007 · Proprietary 4.1M sites, Dataset updated · 2026-10-27 Categories [Security](https://webatla.com/technology?category=Security) [🔒 Get the list](https://webatla.com/technology/recaptcha#preview) Requires a dataset purchase [About reCAPTCHA](https://webatla.com/technology/recaptcha#overview) [Database preview](https://webatla.com/technology/recaptcha#preview) [By country](https://webatla.com/technology/recaptcha#by-country) [By TLD](https://webatla.com/technology/recaptcha#by-tld) [Download](https://webatla.com/technology/recaptcha#download) All figures as of Oct 27, 2026 All figures here come from one snapshot of the webatla database, taken on this date (UTC). We usually refresh it every day. 4,055,825, Sites detected 1.3%, Of all websites ## Preview reCAPTCHA site datasets reCAPTCHA detection is a value inside the **Technologies** column. Two datasets carry it. **Technologies · €159 / month · 4,055,825 rows · 14 columns · webatla-technologies-recaptcha-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | cyberbullying.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 188.114.96.3 | [US](https://webatla.com/country/us) | {…} | 2026-10-12 | PHP, RSS, HSTS, MySQL, HTTP/3, Favicon, Site Kit 1.156.0 , WordPress, Yoast SEO, reCAPTCHA | 0.0000306217 | 18,360,150 | 2003-02-25 | 2027-02-25 | | nedic.ca | [ca](https://webatla.com/tld/ca) | [ca](https://webatla.com/tld/ca) | ICANN | HTTP 200 | 16.52.188.166 | [CA](https://webatla.com/country/ca) | {…} | 2026-10-09 | Google Analytics UA-45855283-1 , PWA, Nginx 1.28.1 , Slick, HTTP/2, jQuery, Favicon, Pure CSS, reCAPTCHA, Open Graph | 0.0000294982 | 18,336,692 | 2000-11-29 | 2027-07-09 | | above.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 103.224.182.24 | [US](https://webatla.com/country/us) | {…} | 2026-09-25 | HubSpot 48120166 , Google Analytics G-DQB7CZVNQD UA-62880640-4 +1 , Google Tag Manager GTM-KKGWZHB , PHP, PWA, HTTP/2, jQuery, Favicon, jsDelivr, Bootstrap 5.3.3 | 0.000716447 | 14,218,489 | 1997-05-20 | 2027-05-21 | | medium.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.152.4 | [US](https://webatla.com/country/us) | {…} | 2026-10-07 | PWA, HSTS, Envoy, React, HTTP/3, Medium, Notion, OpenAI, Dropbox, Express | 0.000247039 | 20,698,600 | 1998-05-27 | 2027-05-26 | | weebly.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 74.115.51.6 | [US](https://webatla.com/country/us) | {…} | 2026-09-22 | PHP, MySQL, HTTP/2, Weebly, jQuery 2.1.4 , Postman, Zendesk, Sendgrid, hreflang, SparkPost | 0.000237772 | 20,292,036 | 2006-03-29 | 2027-03-28 | **All data · €599 / month · 4,055,825 rows · 23 columns · webatla-all-data-recaptcha-2026-10-27.jsonl.zst** | Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | cyberbullying.org | [org](https://webatla.com/tld/org) | [org](https://webatla.com/tld/org) | ICANN | HTTP 200 | 188.114.96.3 | [US](https://webatla.com/country/us) | {…} | 2026-10-12 | PHP, RSS, HSTS, MySQL, HTTP/3, Favicon, Site Kit 1.156.0 , WordPress, Yoast SEO, reCAPTCHA | 2026-10-26 | TRUE | {…} | 0.0000306217 | 18,360,150 | 2026-03-14 | RDAP | 2003-02-25 | 2027-02-25 | 2026-03-14 | Squarespace Domains II LLC | {…} | Domain is active | | nedic.ca | [ca](https://webatla.com/tld/ca) | [ca](https://webatla.com/tld/ca) | ICANN | HTTP 200 | 16.52.188.166 | [CA](https://webatla.com/country/ca) | {…} | 2026-10-09 | Google Analytics UA-45855283-1 , PWA, Nginx 1.28.1 , Slick, HTTP/2, jQuery, Favicon, Pure CSS, reCAPTCHA, Open Graph | 2026-10-21 | TRUE | {…} | 0.0000294982 | 18,336,692 | 2026-07-25 | RDAP | 2000-11-29 | 2027-07-09 | 2026-07-09 | Rebel.ca Corp. | {…} | Domain is active | | above.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 103.224.182.24 | [US](https://webatla.com/country/us) | {…} | 2026-09-25 | HubSpot 48120166 , Google Analytics G-DQB7CZVNQD UA-62880640-4 +1 , Google Tag Manager GTM-KKGWZHB , PHP, PWA, HTTP/2, jQuery, Favicon, jsDelivr, Bootstrap 5.3.3 | 2026-10-18 | TRUE | {…} | 0.000716447 | 14,218,489 | 2026-05-20 | RDAP | 1997-05-20 | 2027-05-21 | 2026-05-15 | Above.com Pty Ltd. | {…} | Domain is active | | medium.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 162.159.152.4 | [US](https://webatla.com/country/us) | {…} | 2026-10-07 | PWA, HSTS, Envoy, React, HTTP/3, Medium, Notion, OpenAI, Dropbox, Express | 2026-10-19 | TRUE | {…} | 0.000247039 | 20,698,600 | 2026-05-17 | RDAP | 1998-05-27 | 2027-05-26 | 2026-05-16 | Amazon Registrar, Inc. | {…} | Domain is active | | weebly.com | [com](https://webatla.com/tld/com) | [com](https://webatla.com/tld/com) | ICANN | HTTP 200 | 74.115.51.6 | [US](https://webatla.com/country/us) | {…} | 2026-09-22 | PHP, MySQL, HTTP/2, Weebly, jQuery 2.1.4 , Postman, Zendesk, Sendgrid, hreflang, SparkPost | 2026-10-16 | TRUE | {…} | 0.000237772 | 20,292,036 | 2026-04-01 | RDAP | 2006-03-29 | 2027-03-28 | 2026-03-30 | MarkMonitor Inc. | {…} | Domain is active | [↓ Download preview (20 rows, free)](https://webatla.com/api/v1/sample/technology/recaptcha?dataset=technologies) [Buy Technologies · €159 / month](https://webatla.com/account/checkout?dataset=technologies) ## reCAPTCHA sites by country | Country | Sites | Share | | --- | --- | --- | | 🇺🇸 [United States](https://webatla.com/country/us) | 1,804,495 | 45.4% | | 🇩🇪 [Germany](https://webatla.com/country/de) | 312,944 | 7.9% | | 🇫🇷 [France](https://webatla.com/country/fr) | 221,207 | 5.6% | | 🇳🇱 [Netherlands](https://webatla.com/country/nl) | 219,684 | 5.5% | | 🇯🇵 [Japan](https://webatla.com/country/jp) | 176,584 | 4.4% | ## reCAPTCHA sites by TLD | TLD | Sites | Share | | --- | --- | --- | | [.com](https://webatla.com/tld/com) | 1,959,857 | 48.3% | | [.uk](https://webatla.com/tld/uk) | 155,270 | 3.8% | | [.org](https://webatla.com/tld/org) | 154,255 | 3.8% | | [.nl](https://webatla.com/tld/nl) | 122,968 | 3.0% | | [.fr](https://webatla.com/tld/fr) | 117,496 | 2.9% | ## The reCAPTCHA dataset Every site we've detected as running reCAPTCHA, with version, hosting, country, TLD and traffic rank. ### reCAPTCHA lives inside 2 datasets reCAPTCHA detection is part of **Technologies** (€159/mo) and **All data** (€599/mo). Buy either to filter the full 4,055,825-site list, or grab a free preview first. [See datasets](https://webatla.com/pricing) [↓ Download free preview (20 rows)](https://webatla.com/api/v1/sample/technology/recaptcha?dataset=technologies) ## About reCAPTCHA ### At a glance - **Vendor:** Google - **Website:** google.com ↗ - **Language:** JavaScript - **License:** Proprietary - **First release:** 2007-01-01 A bot defence is installed in response to a problem, which makes reCAPTCHA one of the few entries in this index whose presence implies that something happened. Nobody adds friction to their own forms speculatively. As of October 2026 we detect it on 4,055,825 sites, and each of those is a site that was worth attacking, or believed itself to be. That inference is the useful part. Spam and credential pressure follow value, so the presence of a challenge on a form is weak but genuine evidence that the site handles something worth taking: accounts, payments, bookings, submissions with commercial worth attached. Sites with nothing to steal rarely accumulate enough abuse to justify the friction. There is a second reading about who administered the site. Deploying a challenge requires obtaining keys and configuring a service, which is a step above installing a plugin and clicking activate. Its presence therefore skews toward sites with somebody technical involved, or at least somebody who followed a guide to the end. The population also carries an unusual privacy and compliance dimension. The service is operated by a large advertising company and executes in the visitor's browser, which places it inside the scope of several regulatory conversations. For anyone selling consent tooling, privacy auditing or alternatives in this category, the population of sites already running it is the addressable market, and it is not published anywhere. United States accounts for 1,804,495 of detections and the .com zone leads. The queries that matter here are intersections with commercial signals. A challenge plus a payment integration plus a login path describes a transactional site. A challenge on an otherwise static brochure site usually means somebody drowned in form spam, which is a different and often more immediate need. The webatla export carries every detection on a domain together, rebuilt daily, so those intersections are a local filter rather than a sequence of paid lookups. The friction itself has commercial consequences worth measuring. Challenges reduce form completion, and businesses that depend on inbound enquiries are trading leads for spam reduction whether or not they have quantified the exchange. A site with a challenge on a high-intent form is a site with a problem it has solved in a way that costs it revenue. That makes the population a market for alternatives rather than merely a list of adopters. Vendors selling invisible or risk-based bot mitigation are selling against exactly this trade, and the sites where the trade is most expensive are identifiable by what surrounds the challenge: a payment path, a booking flow, a quote request. Presence plus commercial intent locates the sites where the friction is costing the most. Google operates it as a Proprietary service and it has been available since 2007. The service is free to deploy, which is why its footprint reflects site owners' decisions rather than any commercial relationship. ## Frequently asked questions How many websites use reCAPTCHA? webatla detects reCAPTCHA on 4.1M websites, refreshed daily, each with its domain, DNS, WHOIS, IP, country and ranking. Can I download the list of websites using reCAPTCHA? Yes, as structured JSONL. Grab a free sample first. What's included for each site, and how fresh is it? Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily. How do I find the websites using reCAPTCHA? Buy the technology dataset, then download the complete list of domains we detect using reCAPTCHA, re-exported every day. What else is in the reCAPTCHA technology data? Each row places reCAPTCHA next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking. Can I download just the sites using reCAPTCHA, or the whole database? Both. Every site running reCAPTCHA comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export. How do I download the list of websites using reCAPTCHA? Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running reCAPTCHA as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank. ## Get the full list of websites using reCAPTCHA Pick the dataset that covers what you need. Each one includes reCAPTCHA and downloads as JSONL, rebuilt daily. Technologies, 14 columns Full website tech stack per site: CMS, payments, analytics, frameworks. €159 / mo [Buy and download](https://webatla.com/account/checkout?dataset=technologies) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=technologies) All data, 23 columns Everything we have, in a single package. The full webatla universe. €599 / mo [Buy and download](https://webatla.com/account/checkout?dataset=all-data) [Download preview dataset](https://webatla.com/api/v1/preview?dataset=all-data) Want to compare every dataset side by side? [Visit the pricing page](https://webatla.com/pricing) ## Related technologies [![HSTS logo](https://webatla.com/assets/tech-logos/hsts.png) HSTS Security · 53.6M sites](https://webatla.com/technology/hsts) [![Cloudflare Bot Management logo](https://webatla.com/assets/tech-logos/cloudflare-bot-management.png) Cloudflare Bot Management Security · 13.0M sites](https://webatla.com/technology/cloudflare-bot-management) [![DDoS-Guard logo](https://webatla.com/assets/tech-logos/ddos-guard.png) DDoS-Guard Security · 685K sites](https://webatla.com/technology/ddos-guard) [![hCaptcha logo](https://webatla.com/assets/tech-logos/hcaptcha.png) hCaptcha Security · 287K sites](https://webatla.com/technology/hcaptcha)