Loading challenge...
CAPTCHA: Honeypot
Beat an invisible bot trap and time-gate without filling the hidden field
What you will learn
- Target only the real, visible fields — a blanket fill of every input trips the hidden trap
- Recognise an off-screen / tabindex=-1 / aria-hidden field as a honeypot and leave it empty
- Respect a minimum fill-time gate — instant submits are a classic bot signal
Honeypot + Time-Trap
A contact form guarded by an invisible bot trap and a minimum-fill-time check — no widget, no token, pure anti-bot heuristics
A real human never sees or fills the hidden field, and never submits in under ~1.5s. A naive automation that blindly fills every input — or submits instantly — gets flagged as a bot by the server.
Your goal: fill only the real fields, leave the trap empty, and pace the submit so the server returns verdict: human.
Contact Form
Submit without tripping the trap
Testing Tips
Automation hints
- ✓ Fill ONLY the real fields by their ids (#contact-name, #contact-email, #contact-message) — never a blanket fill of every
input - ✓ The trap
#hp-website(name="website") is off-screen + tabindex=-1 — leave it empty - ✓ Add a deliberate wait before submitting — instant submits (< 1.5s) are flagged as bots
- ✓ Assert
#captcha-result[data-verdict=human], not just any result message - ✓ Use "Reveal trap" to see what to avoid, then write the test against the invisible version
