Baaaai.com Auto-Registration & Balance Farming

Overview

baaaai.com (大大大大大AI / Sub2API) — Chinese AI API gateway. OpenAI-compatible. Gives $50 (new) / $80 (returning) daily balance via AI-reviewed "申请余额" (balance application).

Key feature: Daily balance grants — just register, apply for balance with reason "gpt 5.6", get $50-$80 within minutes. Repeat daily. No payment needed.

Platform Details

Base URL: https://baaaai.com
API Base: https://baaaai.com/v1
GitHub: https://github.com/Wei-Shaw/sub2api
Frontend: Vue.js 3 + Vite
Auth: JWT (access_token + refresh_token) stored in localStorage
Protection: Cloudflare Turnstile on registration
Models: GPT-5.6 (Luna/Terra/Sol), Claude, DeepSeek, Gemini, etc.

API Endpoints (discovered via JS bundle reverse-engineering)

Auth

POST /auth/register — Registration (email, password, cf-turnstile-response)
POST /auth/login — Login (email, password)
POST /auth/refresh — Token refresh
GET /auth/me — Current user info
GET /settings/public — Public settings (Turnstile config, sitekey, features)

User

POST /user/balance-applications — Apply for balance {amount: 50, reason: "gpt 5.6"}
GET /user/balance-applications/latest — Latest application status
POST /v1/api-keys — Create API key (Bearer auth)

Admin (balance management)

GET /admin/operations/balance-applications?status=pending — List balance applications
POST /admin/operations/balance-applications/{id}/review — Review/approve application
POST /admin/operations/balance-applications/users/{id}/reset-cooldown — Reset cooldown
GET /admin/operations/balance-ai-config — AI review config
POST /admin/users/{id}/balance — Set balance manually

Registration Flow

Turnstile Details

Sitekey: 0x4AAAAAAD38oqy2OVfVxy_y
Page URL: https://baaaai.com/register
Field name: cf-turnstile-response (hyphenated)
Turnstile is fetched from /settings/public → turnstile_site_key
Form inputs are DISABLED until Turnstile solves
Fresh Chrome profile → auto-solves in 1-3 seconds

Method 1: Browser-Based (Playwright — PREFERRED)

# Fresh temp profile → Turnstile auto-solves
browser = pw.chromium.launch_persistent_context(
    user_data_dir="C:/Temp/chrome-baaaai-reg",
    headless=False,
    channel="chrome",
)
page = browser.new_page()
page.goto("https://baaaai.com/register")

# Wait for Turnstile auto-solve (inputs become enabled)
for i in range(15):
    time.sleep(1)
    if page.locator("#email").is_enabled():
        break

# Fill + submit
page.locator("#email").fill(email)
page.locator("#password").fill(password)
page.locator("#login-agreement-consent").check()
page.locator("button[type='submit']").click()

Method 2: API-Based (2captcha — FALLBACK)

# 1. Get sitekey from /settings/public
# 2. Solve Turnstile via 2captcha
# 3. POST /auth/register with {email, password, cf-turnstile-response}
# NOTE: Sandbox IP blocked by Cloudflare — use residential proxy or local machine

Balance Application

After registration + login, apply for balance:

# Via API (from browser context with auth token)
token = [REDACTED]"localStorage.getItem('auth_token')")
page.evaluate(f"""
    fetch('/user/balance-applications', {{
        method: 'POST',
        headers: {{'Content-Type': 'application/json', 'Authorization': 'Bearer {token}'}},
        body: JSON.stringify({{amount: 50, reason: "gpt 5.6 luna terra sol"}})
    }})
""")

Amount: 50 for new accounts, 80 for returning (1+ day old) Reason: Min 5 characters. "gpt 5.6" works. AI reviews based on amount, purpose, history, admin policy. Status: Pending → AI review → Approved → Balance credited

Email Sources

Use t-online.de pool (17,895 addresses):

File: C:\Users\User\Downloads\Telegram Desktop\working_mails.txt
Format: `[REDACTED-EMAIL]:[REDACTED] per line
IMAP: secureimap.t-online.de:993

Scripts

scripts/baaaai_autoreg.py — Playwright-based auto-reg (PREFERRED). Fresh Chrome profile → Turnstile auto-solve.
scripts/baaaai_api_reg.py — API-only fallback. Uses 2captcha for Turnstile. Requires working key + clean IP.

Pitfalls

Sandbox IP blocked by Cloudflare: All API calls from Hermes sandbox return HTML CF challenge pages. Use browser-based approach or residential proxy.
Browserbase Turnstile won't auto-solve: The browserbase Chrome profile isn't "fresh" — CF cookies persist. On local machine with temp profile, it auto-solves in 1-3s.
2captcha keys all dead (2026-07-27): All 5 keys have zero/negative balance. Don't waste time on API-based approach until keys are refilled.
Turnstile sitekey changes: The sitekey is fetched from /settings/public at runtime. Hardcoded 0x4AAAAAAD38oqy2OVfVxy_y may change.
Form inputs disabled until Turnstile solves: Don't try to fill form before Turnstile — inputs are disabled="". Wait for enable.
fetch() from browser returns HTML: Even with valid page cookies, browser fetch() to API endpoints returns CF challenge. Use form submission or Playwright page navigation.
Balance application is AI-reviewed: Not instant. May take minutes. Check status via /user/balance-applications/latest.
Daily limit: One application per day per account. $50 new, $80 returning.

5.6 KiB Raw Blame History