https://zerocaptcha.io/blog Articles on Cloudflare Turnstile, Cloudflare challenge pages and errors, WAF rules and CAPTCHA-solving APIs. en Sat, 03 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-just-a-moment-checking-your-browser https://zerocaptcha.io/blog/cloudflare-just-a-moment-checking-your-browser What Cloudflare's "Just a moment..." and "Checking your browser" pages are, why they appear, what visitors can do, and how automation passes them. Troubleshooting Sat, 03 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-5-second-challenge https://zerocaptcha.io/blog/cloudflare-5-second-challenge The Cloudflare 5-second challenge is the old name for its JavaScript challenge page. What replaced it, how to recognise it, and how to pass it with an API. Explainer Sat, 03 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-waf-bypass https://zerocaptcha.io/blog/cloudflare-waf-bypass Looking for a Cloudflare WAF bypass? What each WAF action does to a scraper, which ones can be passed, which only the site owner can lift, and the request. Explainer Sat, 03 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/ai-captcha-solver https://zerocaptcha.io/blog/ai-captcha-solver What an AI CAPTCHA solver really does, why image recognition does not apply to Cloudflare Turnstile, and how automated Turnstile solving works, without hype. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/captcha-solver-extension-vs-api https://zerocaptcha.io/blog/captcha-solver-extension-vs-api Browser extensions like Buster and NopeCHA vs a CAPTCHA-solving API: what each solves, why extensions struggle with Cloudflare Turnstile at scale, and costs. Comparison Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/captcha-solver-mcp-server https://zerocaptcha.io/blog/captcha-solver-mcp-server Set up the ZeroCaptcha MCP server in Claude Code and Cursor: its four tools, the settings, keeping the key out of your repository, and when to use it. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/proxies-for-cloudflare-turnstile https://zerocaptcha.io/blog/proxies-for-cloudflare-turnstile When a Cloudflare Turnstile task needs a proxy at all, residential vs datacenter vs mobile, sticky sessions, regions, and the rules a proxy must meet. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-403-forbidden https://zerocaptcha.io/blog/cloudflare-403-forbidden A Cloudflare 403 has five usual causes: a challenge page, a WAF block, a browser-signature ban, an IP or country ban, or the origin. How to tell them apart. Troubleshooting Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-bot-management-vs-turnstile https://zerocaptcha.io/blog/cloudflare-bot-management-vs-turnstile What an automated client meets on a Cloudflare site: Bot Management scores, Bot Fight Mode, Turnstile widgets and challenge pages, and what each one needs. Comparison Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-challenge-loop https://zerocaptcha.io/blog/cloudflare-challenge-loop Why a Cloudflare 'Just a moment...' page keeps coming back: the documented causes, IP changes mid-solve, lost cookies, clocks, and fixes for code. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/electron-cloudflare-challenge https://zerocaptcha.io/blog/electron-cloudflare-challenge Why an Electron app's requests hit Cloudflare challenge pages, and the fixes: Chromium's network stack, one session, a steady user agent, and cf_clearance. Troubleshooting Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-error-1006-1007-1008 https://zerocaptcha.io/blog/cloudflare-error-1006-1007-1008 Cloudflare errors 1006, 1007, 1008 and 1106 mean the site owner banned your IP address. What the docs say, who can lift it, and why not to rotate IPs. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-error-1009 https://zerocaptcha.io/blog/cloudflare-error-1009 Cloudflare error 1009 means the site owner banned the country or region of your IP address. Why it happens, who can lift it, and when a proxy region is fine. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-error-1010 https://zerocaptcha.io/blog/cloudflare-error-1010 Cloudflare error 1010 comes from Browser Integrity Check. What it looks for, what an HTTP client should send, and what only the site owner can change. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-error-1015 https://zerocaptcha.io/blog/cloudflare-error-1015 Cloudflare error 1015 means a site's rate limiting rule blocked you. How the rules count, the 429 status, and Python backoff that stops the retries. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-error-1020 https://zerocaptcha.io/blog/cloudflare-error-1020 Cloudflare error 1020 means a site owner's firewall rule blocked your request: what the page shows, why no token lifts it, and what to do next. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-challenge-types https://zerocaptcha.io/blog/cloudflare-challenge-types Cloudflare's three challenge types, including the one called JS Challenge: what each does, who issues it, which clearance passes which, and what bots meet. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-ephemeral-id https://zerocaptcha.io/blog/cloudflare-turnstile-ephemeral-id What a Cloudflare Turnstile ephemeral ID is, who gets it, how it shows in siteverify, how sites use it against fake sign-ups, and what it means for automation. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-error-codes https://zerocaptcha.io/blog/cloudflare-turnstile-error-codes What each Cloudflare Turnstile widget error code means, from 110100 to 600xxx: Cloudflare's current table, which errors to retry, and how to fix each one. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-chrome-extension https://zerocaptcha.io/blog/cloudflare-turnstile-chrome-extension Why a Cloudflare Turnstile widget can't live in a Manifest V3 extension page, what to do instead, and how a content script fills a Turnstile form on a page. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-headless-browser https://zerocaptcha.io/blog/cloudflare-turnstile-headless-browser Why Cloudflare Turnstile fails in headless Chrome, Playwright and Puppeteer, what Cloudflare says about automated browsers, and a fix that uses an API token. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-react-vue-nextjs https://zerocaptcha.io/blog/cloudflare-turnstile-react-vue-nextjs How React, Vue, Nuxt and Next.js apps render Cloudflare Turnstile and send its token, how to verify it on the server, and how automation submits these forms. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-pre-clearance https://zerocaptcha.io/blog/cloudflare-turnstile-pre-clearance Cloudflare Turnstile pre-clearance issues a cf_clearance cookie with the token, so later requests skip WAF challenge rules up to the level a site sets. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-retry-and-refresh https://zerocaptcha.io/blog/cloudflare-turnstile-retry-and-refresh What Cloudflare Turnstile's retry, retry-interval, refresh-expired and refresh-timeout settings do, their defaults, and when to change them. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-siteverify-errors https://zerocaptcha.io/blog/cloudflare-turnstile-siteverify-errors Every Cloudflare Turnstile siteverify error code with Cloudflare's meaning and fix, and why a site rejects a token when you automate a form. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-solve-time-benchmark https://zerocaptcha.io/blog/cloudflare-turnstile-solve-time-benchmark How we measure Cloudflare Turnstile solve time, success rate and availability from the public status feed, with no invented numbers, and how to benchmark yours. Benchmark Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-token https://zerocaptcha.io/blog/cloudflare-turnstile-token What a Cloudflare Turnstile token is, where the widget puts it, how siteverify checks it, what it proves, and how a solving API produces one. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-vs-recaptcha-vs-hcaptcha https://zerocaptcha.io/blog/cloudflare-turnstile-vs-recaptcha-vs-hcaptcha Cloudflare Turnstile, Google reCAPTCHA and hCaptcha side by side: how each checks visitors, tokens, siteverify, prices and limits, and what automation meets. Comparison Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-under-attack-mode https://zerocaptcha.io/blog/cloudflare-under-attack-mode Cloudflare's I'm Under Attack mode puts a Managed Challenge in front of every visitor. What it does, how to spot it, and what scrapers and API clients can do. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-verified-bots https://zerocaptcha.io/blog/cloudflare-verified-bots What Cloudflare's verified bots are, the rules a crawler must meet, the three ways to prove who it is (Web Bot Auth, IP lists, reverse DNS) and how to apply. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-waf-rules-explained https://zerocaptcha.io/blog/cloudflare-waf-rules-explained Cloudflare WAF custom rule actions in Cloudflare's words, terminating vs non-terminating, plan limits, rule order, and what each action means for a bot. Explainer Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-waiting-room https://zerocaptcha.io/blog/cloudflare-waiting-room A Cloudflare Waiting Room is a queue, not a bot check. How to tell it from a challenge page, how its cookie and JSON mode work, and how to wait your turn. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-challenge-platform-explained https://zerocaptcha.io/blog/cloudflare-challenge-platform-explained What /cdn-cgi/challenge-platform, window._cf_chl_opt, the cf_chl cookies and the __cf_chl_ URL parameters are, and what an automated client should do. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/crawlee-cloudflare-turnstile https://zerocaptcha.io/blog/crawlee-cloudflare-turnstile Handle Cloudflare Turnstile forms in a Crawlee PlaywrightCrawler: read the sitekey, get a token from an API, fill the form, and set timeouts that fit. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/crawlee-python-cloudflare-turnstile https://zerocaptcha.io/blog/crawlee-python-cloudflare-turnstile Handle Cloudflare Turnstile forms in Crawlee for Python's PlaywrightCrawler: read the widget, solve the token, fill and submit, with timeouts that fit. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/cypress-cloudflare-turnstile https://zerocaptcha.io/blog/cypress-cloudflare-turnstile Why Cypress can't pass a live Cloudflare Turnstile widget, and how to test your forms with Cloudflare's testing sitekeys and secrets, per environment, in CI. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/go-colly-cloudflare-turnstile https://zerocaptcha.io/blog/go-colly-cloudflare-turnstile A Go Colly collector that finds a Cloudflare Turnstile sitekey with OnHTML, gets a token from a solving API over net/http, and posts the form. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/got-scraping-cloudflare-turnstile https://zerocaptcha.io/blog/got-scraping-cloudflare-turnstile Post a Cloudflare Turnstile form from Node.js with got-scraping: consistent browser headers, a cookie jar, a token from an API, and what replaces it now. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/ai-coding-assistant-captcha-integration https://zerocaptcha.io/blog/ai-coding-assistant-captcha-integration A walkthrough: give Claude Code, Cursor, Copilot or Codex ZeroCaptcha's integration brief and rule files, then check its work against the brief's checklist. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/n8n-cloudflare-turnstile https://zerocaptcha.io/blog/n8n-cloudflare-turnstile Build an n8n workflow that reads a Cloudflare Turnstile sitekey, gets a token from a solving API with HTTP Request nodes, waits in a loop, and submits the form. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/nodriver-cloudflare-turnstile https://zerocaptcha.io/blog/nodriver-cloudflare-turnstile Handle a Cloudflare Turnstile form in nodriver or zendriver: read the widget, get a token from an API, fill the field, call the callback and submit, all async. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/playwright-cloudflare-challenge https://zerocaptcha.io/blog/playwright-cloudflare-challenge Why Playwright gets stuck on Cloudflare's "Just a moment..." page, how to detect it, and how to load a cf_clearance cookie with its user agent and proxy. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/please-unblock-challenges-cloudflare-com https://zerocaptcha.io/blog/please-unblock-challenges-cloudflare-com Why a Cloudflare page says to unblock challenges.cloudflare.com, how to fix it in a browser or network, and what it means for automated clients. Troubleshooting Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/puppeteer-stealth-cloudflare-turnstile https://zerocaptcha.io/blog/puppeteer-stealth-cloudflare-turnstile What puppeteer-extra-plugin-stealth changes, why Cloudflare Turnstile can still refuse a stealthy browser, and a Puppeteer fallback that gets the token. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/python-httpx-cloudflare-turnstile https://zerocaptcha.io/blog/python-httpx-cloudflare-turnstile Get Cloudflare Turnstile tokens from Python with requests for one form, or httpx and asyncio for hundreds at once, with retries that never pay twice. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/scrapy-cloudflare-turnstile https://zerocaptcha.io/blog/scrapy-cloudflare-turnstile A Scrapy spider that reads a Cloudflare Turnstile sitekey from the HTML, gets a token from an API without blocking the crawl, and posts the form. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/scrapy-playwright-cloudflare-turnstile https://zerocaptcha.io/blog/scrapy-playwright-cloudflare-turnstile When the Cloudflare Turnstile widget only exists after JavaScript runs, let scrapy-playwright render the page, then solve the token, fill the form and parse. Tutorial Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/selenium-undetected-chromedriver-cloudflare https://zerocaptcha.io/blog/selenium-undetected-chromedriver-cloudflare What undetected-chromedriver and SeleniumBase UC Mode do about Cloudflare Turnstile, where they stop, and a Selenium fallback that gets a token from an API. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cloudflare-turnstile-wordpress https://zerocaptcha.io/blog/cloudflare-turnstile-wordpress How WordPress sites add Cloudflare Turnstile with the Simple Cloudflare Turnstile plugin, Contact Form 7, WPForms or Gravity Forms, and how to automate them. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/switch-captcha-provider https://zerocaptcha.io/blog/switch-captcha-provider Move Cloudflare Turnstile solving from 2Captcha or a createTask-style service by changing two settings, then check six details before full traffic. Tutorial Wed, 30 Sep 2026 00:00:00 GMT https://zerocaptcha.io/blog/cf-bm-cookie-explained https://zerocaptcha.io/blog/cf-bm-cookie-explained What Cloudflare's __cf_bm cookie holds, when it is set and when it expires, how it differs from cf_clearance, and how an automated client should handle both. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/tls-fingerprint-ja4-cloudflare https://zerocaptcha.io/blog/tls-fingerprint-ja4-cloudflare How JA3 and JA4 fingerprint a TLS handshake, what Cloudflare shows Bot Management customers, and why Python with Chrome's user agent still stands out. Explainer Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/waf-challenges-across-vendors https://zerocaptcha.io/blog/waf-challenges-across-vendors How Cloudflare, AWS WAF, Akamai Bot Manager, Fastly Next-Gen WAF and SafeLine challenge a request: status codes, headers, cookies and lifetimes, side by side. Comparison Thu, 01 Oct 2026 00:00:00 GMT https://zerocaptcha.io/blog/what-is-a-waf https://zerocaptcha.io/blog/what-is-a-waf A web application firewall filters HTTP traffic by rules. How Cloudflare's WAF is built, and what a scraper sees when one of its rules blocks or challenges it. Explainer Wed, 30 Sep 2026 00:00:00 GMT