[ 01 ]What it looks like
A “Press & Hold” button you hold down until the progress ring around it completes.
Captcha type · HUMAN Security
Press-and-hold and PerimeterX challenges from HUMAN Security solved into a usable _px cookie, matched to the proxy and user agent you send.
Also searched asPerimeterXpress and hold captcha_px3 cookieHUMAN Challengex-px-authorization
[ 01 ]What it looks like
A “Press & Hold” button you hold down until the progress ring around it completes.
[ 02 ]Why it is hard
Holding the button is theatre. The real check is a signed sensor payload emitted by an obfuscated collector before and during the press, combined with a proof-of-work run in a Web Worker. Success is a short-lived _px3 cookie, or an x-px-authorization header on mobile, chained with _pxvid and _pxhd, and each reuse is re-scored against the IP reputation and TLS fingerprint behind it.
[ 03 ]How we solve it
A dedicated pool drives the collector and the Web Worker proof-of-work end to end, so the press timing and the sensor payload come from the same session rather than being stitched together. Cookies are produced behind your proxy and userAgent because HUMAN scores both on every reuse. When a site raises the score threshold mid-crawl the task escalates to a longer behavioural run instead of returning a cookie that dies on first use.
[ 02 ]Solve it in five lines
Post the task, get the token. Our SDKs collapse creation, polling and retries into one call.
curl -s https://api.nexcaptcha.net/createTask \
-H "Content-Type: application/json" \
-d '{
"clientKey": "YOUR_API_KEY",
"task": {
"type": "PerimeterXTask",
"websiteURL": "...",
"websiteKey": "...",
"userAgent": "...",
"proxy": "..."
}
}'Required parameters
[ 03 ]Where this one shows up
[ 05 ]Questions about this one
A $0 row means the type is listed but not sold. 2Captcha shows PerimeterX at zero and describes the service as unavailable or under development. We charge $4.49 per 1,000 accepted solves, at a 97.1% accepted rate, because it is a type we actually run.
Yes. PerimeterX was renamed HUMAN Security, and the press-and-hold button is their HUMAN Challenge. If the page sets _px3, _pxvid or _pxhd cookies, this is the type you want, whatever the button says.
Yes. The _px3 cookie is scored against the IP and user agent that earned it, so a cookie solved on our IP is worthless on yours. Send the exit you will actually crawl from and keep it for the session.
Short, usually minutes rather than hours, and HUMAN re-scores on every request. Treat one solve as one session: reuse the cookie until you see the challenge return, then solve again rather than pre-solving a pool of cookies.
Create a key, paste it into the sample above, and watch a real token come back. No card, no sales call.