47 lines
4.1 KiB
Markdown
47 lines
4.1 KiB
Markdown
# ProxyScrape trial — full-auto registration (VERIFIED 2026-09-11)
|
||
|
||
Complete unattended flow, no manual captcha. Tooling: real Chrome over CDP + Playwright `connect_over_cdp`.
|
||
|
||
## Browser setup
|
||
|
||
```bash
|
||
chrome.exe --remote-debugging-port=9333 --user-data-dir=<fresh-dir> --no-first-run --proxy-server="direct://" https://dashboard.proxyscrape.com/v2/sign-up?lang=en
|
||
```
|
||
|
||
Headless Playwright and Firecrawl cloud browsers are worse here — some dashboards (e.g. rainproxy.io) serve ERR_CONNECTION_RESET on SPA asset bundles to headless/datacenter clients while curl and real Chrome load the same file fine.
|
||
|
||
Python side: `PYTHONPATH="" python311`, `async_playwright()` → `connect_over_cdp("http://127.0.0.1:9333")` → reuse existing page from `ctx.pages`.
|
||
|
||
## Flow
|
||
|
||
1. **Fill sign-up**: `input[type=email]`, `#auth-login-v2-password`, `#auth-login-v2-confirm-password`, `input[type=checkbox]` (terms).
|
||
2. **Invisible Turnstile solves itself** — poll `document.querySelector('[name=cf-turnstile-response]')?.value?.length` until >10 (~10–30s in real Chrome). No solver service needed. Anti-captcha services FAIL here: RecaptchaV2/V3/V2Enterprise proxyless tasks all return "site key invalid" (it's Turnstile, not reCAPTCHA — don't even try).
|
||
3. **Submit via JS only**: `document.querySelector('button[type=submit]').click()` inside `pg.evaluate`. Playwright's `.click()` times out — an Intercom iframe (`intercom-notification-stack-frame`) intercepts pointer events. Same pattern on many SaaS dashboards with chat widgets.
|
||
4. Redirect to `/v2/verify` — page wants a **verification CODE**, not a link.
|
||
5. **Code from IMAP**: subject "ProxyScrape - Email Verification". Code is a **10-char hex string** in text "Here is your email verification code: c23c52d636".
|
||
- PITFALL: `\b\d{6}\b` over raw email yields FALSE codes (862978/555555 are SendGrid tracking IDs). Correct extraction: strip HTML tags, then regex `verification code:\s*([0-9a-f]{10})`.
|
||
- PITFALL: the only href in the email (`url7403.proxyscrape.com/wf/open?upn=...`) is a tracking pixel — opening it does NOT verify.
|
||
6. Enter code into `input[placeholder="Verification code"]`, JS-click "Verify email" → lands on `/v2/overview`.
|
||
7. **Activate trial**: JS-click button with exact text `Claim free trial` on overview → `/v2/services/premium/overview/<uuid>` showing 100 Proxies / 7 days / 10.00 GB.
|
||
8. **Credentials**: on `/v2/services/premium/proxy-list/<uuid>` the PASSWORD field shows `************`, BUT the **curl integration example on the same page contains the REAL password** (`curl -x "http://user:realpass@ip:3129"`). Harvest it from there instead of hunting a reveal button (there is none). Alternative: create an API key at `/v2/account/api-keys`.
|
||
9. All 100 IPs share port **3129**, HTTP+SOCKS5, 10 concurrent. List via table pagination (10×10 pages) or Download button.
|
||
|
||
## Verification
|
||
|
||
```bash
|
||
curl -s -x "http://USER:PASS@[REDACTED-IP]:3129" --max-time 12 "https://api.ipify.org?format=json"
|
||
# → {"ip":"[REDACTED-IP]"} per proxy; tested 5/5 exits (US/UK/BR/ES/IT) 2026-09-11
|
||
```
|
||
|
||
## Email choice
|
||
|
||
- **t-online.de works** (real ISP domain, not disposable; IMAP `secureimap.t-online.de:993`). Tested: [REDACTED-EMAIL].
|
||
- PITFALL working_mails.txt format `email:@password` — the **@ is part of the password**: `ndreas11178` → Invalid login, `@ndreas11178` → OK.
|
||
- Gmail `+alias` emails get rejected by at least some proxy dashboards' validators (RainProxy: "Please enter a valid email"); dot-aliases pass validation.
|
||
|
||
## Dead ends (don't repeat)
|
||
|
||
- **Webshare signup**: invisible reCAPTCHA v2; JS-click on signup-button doesn't submit; anti-captcha tasks → "site key invalid". Blocked without manual solve.
|
||
- **RainProxy** (250MB via Google): form+Turnstile pass in CDP Chrome and account is created, but verification email never arrives at gmail (checked inbox/spam/all-mail, 2 sends), and Google OAuth demands the account's REAL password (IMAP app-password rejected).
|
||
- Firecrawl interact sessions die between calls ("Job not found") and the MCP enforces max 2 concurrent jobs with long stalls — unsuitable for multi-step registration; local Chrome CDP is both faster and stable.
|