Outlook Funcaptcha detects BAS

[Grassman]

Hi I am trying to create Outlook accounts here: login.live.com

I am using mobile IPs and constantly getting a 10 x Funcaptcha.
Getting these 10 x Funcaptchas always means that they have found something suspicious.
I have used BAS with PerfectCanvas and tried many times, each time with new profile and new IP.
If I try it on the same device with same IPs, but manually with normal Chrome browser, I do always get only 1 x Funcaptcha. So the problem is limited to BAS.

This issue is new. Funcaptcha has implemented new detection algorithms, which for example detects any kind of WebRTC spoof and block, but now also 100% of BAS profiles with PerfectCanvas.
My PerfectCanvas fingerprint is "Microsoft Windows, Chrome, Desktop".
I double checked the PerfectCanvas request token with CanvasInspector and it seems to be the same token I used maybe 2 weeks ago.

Please help me with this.

[sergerdn]

@Grassman said in Outlook Funcaptcha detects BAS:

So the problem is limited to BAS.

The problem does not depend on the BAS itself, but depends on setting up the BAS, fingerprint, your proxy, and your hands.

[aronax]

@sergerdn That was very helpful. Why don't you just write in all your forum posts something like "Pay me to resolve it. Maybe it'll work for a couple of days until it gets patched"? How on earth the problem does not depend on BAS if lots of people in this community say that other tools don't get detected?

@Grassman Have not worked with Outlook, but with some other projects I managed to bypass their anti-bot system by using mobile fingerprints, especially Android. Don't know if it'll work here, but you can try it.
Also sometimes it helps to not emulate things like WebGL, Canvas, Audio etc and use the real ones.
Again, not sure, if this helps, because I haven't worked on outlook lately, but maybe it's worth trying

[Grassman]

@aronax said in Outlook Funcaptcha detects BAS:

@Grassman Have not worked with Outlook, but with some other projects I managed to bypass their anti-bot system by using mobile fingerprints, especially Android. Don't know if it'll work here, but you can try it.
Also sometimes it helps to not emulate things like WebGL, Canvas, Audio etc and use the real ones.
Again, not sure, if this helps, because I haven't worked on outlook lately, but maybe it's worth trying

Thank you this sounds reasonable. I will give it a try.

[Grassman]

@aronax
What other tools can you think of when it comes to spoofing fingerprints like Canvas?

[Grassman]

The problem does not depend on the BAS itself, but depends on setting up the BAS, fingerprint, your proxy, and your hands.

I think the idea of the FingerprintManager is to not care about these settings if it would work as advertised, because if it would work Funcaptcha couldn't detect it.

[FastSpace]

@Grassman problem in your hands.

[sergerdn]

@aronax said in Outlook Funcaptcha detects BAS:

@sergerdn That was very helpful.

This is a technical engineering forum. If someone keeps asking how to fix a trivial issue that’s been answered many times before, what should I do? Should I just copy and paste my previous responses - the ones I’ve already written repeatedly in other threads?

If someone needs help, their answer should include:

• What I did
• What I expected to happen
• What actually happened
• What I tried to fix it

For future reference:

• Fingerprint should be unique.
• Proxy must be support UDP traffic.
• User should understand:
  • How the anti-fraud system works.
  • How BAS settings need to be adjusted for different websites. All details are in the BAS wiki.

[m4zuper]

Pay attention to the proxy.
I made several attempts to register an account in BAS WITHOUT using a proxy. In this case, it gave 1 or 2 stages of captcha. The same thing happened with VPN.

With a proxy, in BAS, there were 10 stages, BUT in real chrome, when using the same proxies, there were also 10 stages.

[Grassman]

@m4zuper
I am awasre of this issue, this is why I used mobile IPs with USB-Tethering and also my Residential Home IP. No proxies.
The problem still exists only when using BAS (without proxy).
The issue is very new. Was it working for you in the past few days? Can you recommend me some settings?

[m4zuper]

@Grassman I don't do account registration, so I can't really answer that question.

[Grassman]

@FastSpace said in Outlook Funcaptcha detects BAS:

@Grassman problem in your hands.

What do you mean? Can you help me?

[to-nice]

@Grassman BAS is a great project, the problem is that the developers don’t seem to care much, and as @aronax says, only people interested in selling their work step in. It seems like they are here all day just to tell you that the errors are yours, even though I can assure you that many times that’s not true.

[Grassman]

@to-nice yes this is true. I made the same expirence here.

[Grassman]

So I still can not get a normal funcaptcha. I do always get a 10 x funcaptcha.
Anyone can help?

[ZikoBots]

@Grassman what you use to solve the funcaptcha ?

[Grassman]

I do solve it manually.

[bebetter]

What did you do to solve the problem? I am interested in avoid detection in BAS
Thank you!