Blog

Bot protection research for request-based teams.

Practical notes on Akamai, DataDome, Incapsula, Kasada, browser state, telemetry, and the places request clients drift away from real Chrome behavior.

General

TLS fingerprint

Header order

Client hints

Tips & tricks/General

How to Use powhttp: Recording, Comparing, and Proxying Traffic for Request-Based Scraping

powhttp barely has docs, so here's the guide. What it is, why request-based scraping needs wire-level truth DevTools can't show, and how to record scripts and browsers, search a session, diff requests 1:1, replay them, route through external proxies, and export a HAR our analyzer reads.

Hyper SolutionsJul 29, 202617 min read

One Prompt, a Full Airline Scraper: Announcing Our Claude Code Plugin

We let Claude Code one shot a complete request based scraper for Etihad's flight pricing API in 16 minutes, then ran it with zero AI in the loop. Here's the demo, the numbers, and our new Claude Code plugin.

Hyper SolutionsJul 17, 20266 min read

Header Order Is Not Enough: Why Bad DataDome Captures Still Get Blocked

Most request-based DataDome failures come from copying headers out of a browser session that was not recorded cleanly.

Hyper SolutionsJun 30, 202611 min read