CEO of urlscan.io here: We will be evaluating the use of captcha bypass services soon, we are fully aware of the growing problem of captchas being abused by threat actors to hide their malicious websites from automated analysis tools such as ours.

It's honestly a frustrating problem as we're effectively in an arms race with the likes of Cloudflare, Google et al, and we're in the same boat with less reputable services like scrapers and bots. The recent developments around Web Environment Integrity are concerning to us for the same reasons. Feel free to reach out with any questions or suggestions you might have!

I am not familiar with your product but that won't stop me from suggesting that maybe a Y/N API needs a 3rd answer: N/A.

A captcha might serve as a strong negative signal.

Given the volume of automated link scraping that you do, would it be possible for your company to arrange for a deal with Cloudflare allowing your servers past their Captcha gate, at least around the free-tier Captcha which the scammers most likely use?

This right here is just such a scandal waiting to happen.

Check https://docs.google.com/forms/d/e/1FAIpQLSdqYNuULEypMnp4i5pR... (linked from https://blog.cloudflare.com/friendly-bots/) if you didn’t already.

Disclaimer: I work at CF