Bypass Solution

The PerimeterX Hold Captcha (pxhc) bypass endpoints and the flow to use in order to bypass a captcha.

How the Solution Works

PXHC is asynchronous: you queue a solve and then poll for the result.

1. Reach the block page. Request the target until PerimeterX serves the /blocked press-and-hold page, then read the _pxAppId, uuid, and vid from its markup. (You can fetch it through the optional /extra/tls helper.)

2. Queue the solve. POST to /{app_id}/solve with the app id, page URL, and proxy. You get a task_id back.

3. Poll the result. POST the task_id to /{app_id}/pull until status is solved; the response then carries cookies._px3.

4. Attach and send. Put _px3 (and any additional cookie) on your own request and continue.

The solver is asynchronous cause the solving time is based on the required "press" time returned by px server during the challenge loading

Endpoint

The endpoint lives on the px-web subdomain:

https://pxhc.takionapi.tech/generate

Queue a PXHC solve

post

Submits a press-and-hold captcha for the given PX app_id and returns a task_id. Poll /{app_id}/pull with it until the task is solved.

Authorizations

ApiKeyHeaderApiKeyQuery

x-api-keystringRequired

Path parameters

app_idstringRequired

The PerimeterX app id (_pxAppId) of the target.

Example: PXZiTus4E5

Body

application/json

pxappidstringRequired

The PX app id (same as the path app_id).

Example: PXZiTus4E5

page_urlstring · uriRequired

The /blocked page URL that served the captcha.

Example: https://advertising.walmart.com/blocked?url=…

proxystringRequired

Proxy in ip:port or ip:port:user:pass format.

Example: 1.2.3.4:8000:user:pass

pxuuidstringOptional

The PX uuid from the block page (optional; derived if omitted).

pxvidstringOptional

The PX vid from the block page (optional).

Other propertiesanyOptional

Responses

200

Task queued.

application/json

task_idstringOptional

Poll /{app_id}/pull with this id.

Example: b1f2…

Other propertiesanyOptional

400

Invalid input.

application/json

401

Authentication or quota failure — HTTP 401 with an error message.

application/json

403

Access gated for this key/service — the key is not whitelisted for PXHC, or a trial is not available (this can also surface as 404).

application/json

500

Internal error.

application/json

post/{app_id}/solve

HTTPcURLJavaScriptPython

POST /{app_id}/solve HTTP/1.1
Host: pxhc.takionapi.tech
x-api-key: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 186

{
  "pxappid": "PXZiTus4E5",
  "page_url": "https://advertising.walmart.com/blocked?url=…",
  "proxy": "1.2.3.4:8000:user:pass",
  "pxuuid": "text",
  "pxvid": "text",
  "ANY_ADDITIONAL_PROPERTY": "anything"
}

{
  "task_id": "b1f2…",
  "ANY_ADDITIONAL_PROPERTY": "anything"
}

Poll a PXHC task

post

Returns the state of a queued task. Keep polling while status is pending; when status is solved the response carries cookies._px3.

Authorizations

ApiKeyHeaderApiKeyQuery

x-api-keystringRequired

Path parameters

app_idstringRequired

The PerimeterX app id (_pxAppId) of the target.

Example: PXZiTus4E5

Body

application/json

task_idstringRequiredExample: b1f2…

Responses

200

Current task state.

application/json

statusstring · enumOptional

Task state.

Example: solvedPossible values:

solve_statusstringOptional

Detail on the solve outcome (present when finished).

Example: success

Other propertiesanyOptional

400

Invalid input.

application/json

401

Authentication or quota failure — HTTP 401 with an error message.

application/json

404

Unknown or expired task.

application/json

500

Internal error.

application/json

post/{app_id}/pull

HTTPcURLJavaScriptPython

POST /{app_id}/pull HTTP/1.1
Host: pxhc.takionapi.tech
x-api-key: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 21

{
  "task_id": "b1f2…"
}

{
  "status": "pending"
}