Idesmasp.com Shows Fake Anti-Bot Captcha

While examining suspicious websites, we came across idesmasp.com, a deceptive webpage that promotes browser notification spam and can redirect users to potentially unreliable or hazardous websites.

Many visitors to similar webpages as idesmasp.com typically land there through redirects initiated by sites utilizing rogue advertising networks. It's important to note that the actions of rogue pages, including the content they load or endorse, may vary based on various factors.

During our investigation, idesmasp.com featured a pop-up containing a checkbox-style CAPTCHA verification. Beneath this prompt was an image depicting five robots, accompanied by instructions urging users to "Click 'Allow' if you are not a robot".

These CAPTCHA tests are fraudulent, designed to deceive users into granting idesmasp.com permission to display browser notifications. Rogue websites employ such tactics to conduct intrusive advertising campaigns. The notifications and ads delivered by these sites may promote online scams, unreliable or hazardous software, and even malware.

How Can You Recognize a Fake Captcha Page?

Recognizing a fake CAPTCHA page requires attention to certain details and cues. Here are some indicators to help you identify a fake CAPTCHA page:

Unusual or Suspicious Content: Fake CAPTCHA pages may contain unusual or suspicious content, such as grammatical errors, poorly designed graphics, or inconsistent formatting.

Request for Unnecessary Permissions: Legitimate CAPTCHA tests typically do not require users to grant additional permissions, such as allowing browser notifications or accessing sensitive information. If a CAPTCHA prompt asks for such permissions, it could be a red flag.

Unconventional Design or Layout: Fake CAPTCHA pages may have an unconventional design or layout that differs from standard CAPTCHA formats. Look for discrepancies in the appearance or structure of the CAPTCHA prompt compared to authentic examples.

Presence of Ads or Promotions: Fake CAPTCHA pages may display advertisements or promotions alongside the CAPTCHA prompt. Legitimate CAPTCHA tests are typically focused solely on verifying human users and do not include promotional content.

No Verification Process: Legitimate CAPTCHA tests typically involve some form of verification process to confirm that the user is human, such as selecting specific images or solving puzzles. If there is no verification process or if it seems overly simplistic, it could indicate a fake CAPTCHA page.

Request for Personal Information: Fake CAPTCHA pages may request personal information, such as email addresses or phone numbers, as part of the verification process. Legitimate CAPTCHA tests do not typically require users to provide personal information beyond confirming their humanity.

Unexpected Redirects or Pop-ups: If encountering a CAPTCHA prompt results in unexpected redirects to other websites or pop-up windows, it may indicate a fake CAPTCHA page attempting to engage in malicious activities.

Check the URL: Verify the URL of the webpage displaying the CAPTCHA prompt. Fake CAPTCHA pages may use deceptive or slightly altered URLs to mimic legitimate websites. Pay attention to any inconsistencies or suspicious elements in the URL.