captcha & challenge intel

share on xlinkedin

one card per challenge system: the mechanic, the score model and its polarity, the gate escalation ladder, and how it is solved. read the polarity before the score: a 0.9 means human on recaptcha and a near-certain bot on hcaptcha enterprise. drag the score, watch the gate flip, and use the status-code identifier to name who blocked you.

google
intuition machines
cloudflare
arkose labs
geetest
amazon
datadome
akamai
kasada

recaptcha v2

google · image grid · confirmed · as of 2026-06-15

token it mints ↗loader intel ↗

type: captcha-widget
mechanic: image grid
token: g-recaptcha-response

score model + polarity

binary pass/fail on the i'm-not-a-robot checkbox, escalating to an image grid.

threshold convention

no numeric score; a passive risk read decides whether the checkbox passes silently or pops a grid.

no 0..1 score axis: the gate is a pass/fail solve or a marker, not a tunable number.

score → outcome

recaptcha v2 has no numeric 0..1 score to drag; its gate is a pass/fail solve or a marker, not a tunable score. the escalation ladder above is the model.

escalation ladder

checkbox passes silently (low risk read)
image grid challenge (suspicious read)
harder / repeated grids on continued suspicion

solve approach

legit: click the checkbox, solve the grid. automation: solver farms ship the grid to human workers or a vision model and post back g-recaptcha-response.

which vendor blocked me?

pick the status code (and the tell) you got back; the catalog maps it to the systems that gate that way. a bare 429 with no captcha is the kasada drop.

datadome serves a 403 with a dd{} json that redirects to captcha-delivery; akamai 403s protected routes while _abck stays ~-1~.

likely vendors · 4

cloudflare turnstilecloudflare
aws waf captchaamazon
datadomedatadome
akamai bot managerakamai