Disclosure Statement: This site contains affiliate links, which means that I may receive a commission if you make a purchase using these links. As an eBay Partner, I earn from qualifying purchases.
If you find these projects useful please consider becoming a sponsor with Patreon, GitHub or Liberapay.

Blocked by hCaptcha. Seems to robot behavior

Post Reply
daisson.jb
Posts: 2
Joined: Thu Aug 15, 2024 8:25 pm

Blocked by hCaptcha. Seems to robot behavior

Post by daisson.jb »

Hello.

We've been using CEF4Delphi since october/2023. In most cases it works fine. But we´ve facing in issue thats involve hCaptcha.
First of all, our process consist of access an Brasilian governament page. After that we insert informations on page's components by javascript code. By this time our user has to click on an Continue button. After that the hCaptcha is on the screen with the "I'm human" box. So, the user click on that option e suddenly the message below shows up:

Blocked by Captcha. Robot behavior blocked from 8am to 6pm.

Well, this website has some "inteligence" to block robot process, such as this routine.

An odd situation is that this issue happens in some equipments (desktop computers) e do not happen in other equipments (also desktop computers). But they all are in the same network (intranet). And in most cases have the same operating system (windows by the way).

Do you have any tips for this?
Is this relate with cookies?

I´ve been looking in demos folder, here in forum's messages, etc. No success so far.

Thanks.
User avatar
salvadordf
Posts: 4620
Joined: Thu Feb 02, 2017 12:24 pm
Location: Spain
Contact:

Re: Blocked by hCaptcha. Seems to robot behavior

Post by salvadordf »

Hi,

Some web pages check the supported browser API functions to detect embedded browsers.
Each web page has a different way to detect embedded browsers.

Use the MobileBrowser demo and make some changes to see if that works.
daisson.jb
Posts: 2
Joined: Thu Aug 15, 2024 8:25 pm

Re: Blocked by hCaptcha. Seems to robot behavior

Post by daisson.jb »

Hi.

Thank you Salvador for your answer. Although, the MobileBrowser demo test worked but it was blocked the same way as we have in our app.

Do you have another tips for this?

Thanks.
User avatar
salvadordf
Posts: 4620
Joined: Thu Feb 02, 2017 12:24 pm
Location: Spain
Contact:

Re: Blocked by hCaptcha. Seems to robot behavior

Post by salvadordf »

Check the JavaScript code in that page to know what browser information is sent to the server.

That should give you a clue about how they are identifying the browser and then you can try the MobileBrowser demo.

MobileBrowser uses some DevTools methods to emulate different browser settings and sometimes they can be used to bypass those checks.
coater
Posts: 210
Joined: Sat Sep 29, 2018 1:51 pm

Re: Blocked by hCaptcha. Seems to robot behavior

Post by coater »

I encounter same problem, !
Are you a robot? This always showed after clicking many times.

https://www.sciencedirect.com/science/article/pii/003238619595305K/pdf?md5=3e7b12ab9791dfa392181a5dbc7f7f7c&pid=1-s2.0-003238619595305K-main.pdf
coater
Posts: 210
Joined: Sat Sep 29, 2018 1:51 pm

Re: Blocked by hCaptcha. Seems to robot behavior

Post by coater »

api.js?render=explicit:1 [Cloudflare Turnstile] Error: 600010.
x @ api.js?render=explicit:1
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'browsing-topics'.
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'.
challenges.cloudflare.com/:1 An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'browsing-topics'.
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'.
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/feedback-reports/1h2qa/zh-cn/light/verifying:1 An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
blob:https://challenges.cloudflare.com/48034880-8edf-43c6-be2d-32691bfccb54:1 The page did not request an origin-keyed agent cluster, but was put in one anyway because the origin 'https://challenges.cloudflare.com' had previously been placed in an origin-keyed agent cluster. Update your headers to uniformly request origin-keying for all pages on the origin.
v1:1
v1:1 Request for the Private Access Token challenge.
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcvdJyHva..zZn8X08o695w4jXr02LWAKpr0lYS1Y6_M6s-1746886591-1.3.1.1-4Uf1Td13sa.1PuUE_8Y8UJLuGDohJ3m5Il_K4VME_FY/1h2qa/0x4AAAAAAAIJB5yGm8wJK_4V/light/fbE/api/normal/auto/#refresh:1 The resource https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally.
DevTools failed to load source map: Could not load content for https://sdfestaticassets-us-east-1.sciencedirectassets.com/shared-assets/108/css/react-header-and-footer/21.0.3/styles.css.map: HTTP error: status code 403, net::ERR_HTTP_RESPONSE_CODE_FAILURE
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcvdJyHva..zZn8X08o695w4jXr02LWAKpr0lYS1Y6_M6s-1746886591-1.3.1.1-4Uf1Td13sa.1PuUE_8Y8UJLuGDohJ3m5Il_K4VME_FY/1h2qa/0x4AAAAAAAIJB5yGm8wJK_4V/light/fbE/api/normal/auto/#refresh:1 The resource https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally.
Post Reply