CAPTCHA: Honeypot

Beat an invisible bot trap and time-gate without filling the hidden field

What you will learn

Target only the real, visible fields — a blanket fill of every input trips the hidden trap
Recognise an off-screen / tabindex=-1 / aria-hidden field as a honeypot and leave it empty
Respect a minimum fill-time gate — instant submits are a classic bot signal

Honeypot + Time-Trap

A contact form guarded by an invisible bot trap and a minimum-fill-time check — no widget, no token, pure anti-bot heuristics

A real human never sees or fills the hidden field, and never submits in under ~1.5s. A naive automation that blindly fills every input — or submits instantly — gets flagged as a bot by the server.

Your goal: fill only the real fields, leave the trap empty, and pace the submit so the server returns verdict: human.

Contact Form

Submit without tripping the trap

Testing Tips

Automation hints

✓ Fill ONLY the real fields by their ids (#contact-name, #contact-email, #contact-message) — never a blanket fill of every input
✓ The trap #hp-website(name="website") is off-screen + tabindex=-1 — leave it empty
✓ Add a deliberate wait before submitting — instant submits (< 1.5s) are flagged as bots
✓ Assert #captcha-result[data-verdict=human], not just any result message
✓ Use "Reveal trap" to see what to avoid, then write the test against the invisible version

Related Challenges

CAPTCHA: Honeypot

Beat an invisible bot trap and time-gate without filling the hidden field

What you will learn

Target only the real, visible fields — a blanket fill of every input trips the hidden trap
Recognise an off-screen / tabindex=-1 / aria-hidden field as a honeypot and leave it empty
Respect a minimum fill-time gate — instant submits are a classic bot signal

Honeypot + Time-Trap

A contact form guarded by an invisible bot trap and a minimum-fill-time check — no widget, no token, pure anti-bot heuristics

Your goal: fill only the real fields, leave the trap empty, and pace the submit so the server returns verdict: human.

Contact Form

Submit without tripping the trap

Testing Tips

Automation hints

✓ Fill ONLY the real fields by their ids (#contact-name, #contact-email, #contact-message) — never a blanket fill of every input
✓ The trap #hp-website(name="website") is off-screen + tabindex=-1 — leave it empty
✓ Add a deliberate wait before submitting — instant submits (< 1.5s) are flagged as bots
✓ Assert #captcha-result[data-verdict=human], not just any result message
✓ Use "Reveal trap" to see what to avoid, then write the test against the invisible version

Related Challenges

iFrames

Hard

Shadow DOM

Hard

Drag & Drop

Hard

CAPTCHA: Honeypot

What you will learn

Honeypot + Time-Trap

Contact Form

Testing Tips

Timer

Need Help?

Related Challenges

iFrames

Shadow DOM

Drag & Drop

CAPTCHA: Honeypot

What you will learn

Honeypot + Time-Trap

Contact Form

Testing Tips

Timer

Need Help?

Related Challenges

iFrames

Shadow DOM

Drag & Drop