hcaptcha

bot-detector intel

  • hcaptcha api.js

    [ok]

    https://js.hcaptcha.com/1/api.js ↗

    last ran
    2026-06-29 19:22 utc
    (5d ago)
    last updated
    2026-06-29 19:22 utc
    (5d ago)
    size
    318.6kb
    sha256
    398d3d8d8b00
    apis touched
    513
    513 raw
    bot tells
    83
    sinks
    4
    0 leaked
    hazards
    0
    structural
    0
    anti-debug
    0
    L3/L4 hazards
    consistency
    0
    cross-checks
    providers
    0

    categories probed (19)

    click a row to drill into every api the script probes in that category.

    • [+] introspection13 apis · 3 tells · 81 hits
      • [+] *.stackhigh · bot-tell×12
        details + source hits (12)
      • [+] Function.prototype.toStringhigh · bot-tell×3
        details + source hits (3)
      • [+] Object.definePropertymedium×13
        details + source hits (13)
      • [+] Object.getOwnPropertyDescriptormedium · bot-tell×5
        details + source hits (5)
      • [+] Error.stackTraceLimitmedium×3
        details + source hits (3)
      • [+] Function.prototype.bindmedium×3
        details + source hits (3)
      • [+] Function.prototype.applymedium×2
        details + source hits (2)
      • [+] Proxymedium×2
        details + source hits (2)
      • [+] Object.getPrototypeOfmedium×1
        details + source hits (1)
      • [+] *.toStringlow×14
        details + source hits (14)
      • [+] *.hasOwnPropertylow×9
        details + source hits (9)
      • [+] Object.createlow×8
        details + source hits (8)
      • [+] *.constructorlow×6
        details + source hits (6)
    • [+] events11 apis · 3 tells · 96 hits
      • [+] *.deltaXmedium · bot-tell×1
        details + source hits (1)
      • [+] *.deltaYmedium · bot-tell×1
        details + source hits (1)
      • [+] *.codelow · bot-tell×1
        details + source hits (1)
      • [+] *.dispatchEventlow×1
        details + source hits (1)
      • [+] *.keylow×1
        details + source hits (1)
      • [+] *.datainfo×36
        details + source hits (36)
      • [+] *.addEventListenerinfo×32
        details + source hits (32)
      • [+] *.locationinfo×11
        details + source hits (11)
      • [+] *.clientXinfo×5
        details + source hits (5)
      • [+] *.clientYinfo×5
        details + source hits (5)
      • [+] *.keyCodeinfo×2
        details + source hits (2)
    • [+] anti-debug4 apis · 3 tells · 77 hits
      • [+] console.errormedium · bot-tell×10
        details + source hits (10)
      • [+] console.logmedium · bot-tell×8
        details + source hits (8)
      • [+] console.warnmedium · bot-tell×5
        details + source hits (5)
      • [+] consolelow×54
        details + source hits (54)
    • [+] headless-tells3 apis · 3 tells · 19 hits
      • [+] requirehigh · bot-tell×4
        details + source hits (4)
      • [+] globalmedium · bot-tell×12
        details + source hits (12)
      • [+] modulemedium · bot-tell×3
        details + source hits (3)
    • [+] document8 apis · 2 tells · 46 hits
      • [+] *.contentWindowhigh · bot-tell×5
        details + source hits (5)
      • [+] document.currentScriptmedium · bot-tell×4
        details + source hits (4)
      • [+] document.createElementlow×8
        details + source hits (8)
      • [+] document.createElementNSlow×2
        details + source hits (2)
      • [+] document.referrerlow×2
        details + source hits (2)
      • [+] document.cookielow×1
        details + source hits (1)
      • [+] document.bodyinfo×15
        details + source hits (15)
      • [+] document.documentElementinfo×9
        details + source hits (9)
    • [+] css4 apis · 2 tells · 6 hits
      • [+] *.getComputedStylehigh · bot-tell×1
        details + source hits (1)
      • [+] getComputedStylehigh · bot-tell×1
        details + source hits (1)
      • [+] *.getPropertyValuelow×1
        details + source hits (1)
      • [+] *.matchesinfo×3
        details + source hits (3)
    • [+] navigator4 apis · 2 tells · 9 hits
      • [+] navigator.pluginsmedium · bot-tell×3
        details + source hits (3)
      • [+] navigator.maxTouchPointsmedium · bot-tell×1
        details + source hits (1)
      • [+] navigator.languagelow×4
        details + source hits (4)
      • [+] navigator.userAgentlow×1
        details + source hits (1)
    • [+] window4 apis · 1 tells · 7 hits
      • [+] innerWidthlow · bot-tell×3
        details + source hits (3)
      • [+] devicePixelRatiolow×1
        details + source hits (1)
      • [+] innerHeightlow×1
        details + source hits (1)
      • [+] location.hrefinfo×2
        details + source hits (2)
    • [+] storage5 apis · 0 tells · 29 hits
      • [+] *.keyslow×13
        details + source hits (13)
      • [+] *.matchlow×5
        details + source hits (5)
      • [+] *.postMessagelow×4
        details + source hits (4)
      • [+] *.openlow×3
        details + source hits (3)
      • [+] *.readyinfo×4
        details + source hits (4)
    • [+] wasm3 apis · 0 tells · 14 hits
      • [+] WebAssembly.Modulemedium×2
        details + source hits (2)
      • [+] WebAssembly.instantiatemedium×1
        details + source hits (1)
      • [+] WebAssemblylow×11
        details + source hits (11)
    • [+] timing3 apis · 0 tells · 77 hits
      • [+] requestAnimationFramelow×1
        details + source hits (1)
      • [+] Dateinfo×52
        details + source hits (52)
      • [+] Date.nowinfo×24
        details + source hits (24)
    • [+] fonts2 apis · 0 tells · 11 hits
      • [+] *.checkmedium×1
        details + source hits (1)
      • [+] *.loadlow×10
        details + source hits (10)
    • [+] media2 apis · 0 tells · 3 hits
      • [+] *.canPlayTypemedium×2
        details + source hits (2)
      • [+] crypto.subtleinfo×1
        details + source hits (1)
    • [+] canvas2 apis · 0 tells · 5 hits
      • [+] *.getContextmedium×1
        details + source hits (1)
      • [+] *.fillinfo×4
        details + source hits (4)
    • [+] dom-layout2 apis · 0 tells · 11 hits
      • [+] *.getBoundingClientRectmedium×5
        details + source hits (5)
      • [+] matchMedialow×6
        details + source hits (6)
    • [+] math1 apis · 0 tells · 1 hits
      • [+] Math.sqrtlow×1
        details + source hits (1)
    • [+] audio1 apis · 0 tells · 2 hits
      • [+] *.sampleRatemedium×2
        details + source hits (2)
    • [+] screen1 apis · 0 tells · 2 hits
      • [+] screen.orientationinfo×2
        details + source hits (2)
    • [+] webrtc1 apis · 0 tells · 17 hits
      • [+] *.sendlow×17
        details + source hits (17)

    bot-detection tells (19)

    strong indicators of bot-detection intent. drill into the categories section below to inspect description, evasion notes, and source snippets for any tell.

    network sinks (4)

    every place the script could ship data off the page. expand a row to see headers and the traced payload entries.

    • [+] fetchGET tno leaks

      url source · t

      location · L4:20283

      K.fetch(t,o)
    • [+] xhrGET i.urlno leaks

      url source · i.url

      location · L4:31241

      payload · shape string

      • <body>: literal null
      null
      V.send(null)
    • [+] fetchGET nno leaks

      url source · n

      location · L4:89936

      fetch(n,o)
    • [+] fetchGET uno leaks

      url source · u

      location · L4:298851

      fetch(u,p?{signal:p.signal}:{})

related instruments