Show HN: xhr.dev – Bot Detection Avoidance via Forward Proxy

Hey HN! I’m John from xhr.dev (https://xhr.dev). At xhr.dev, I’m building tools for reverse engineering websites, and our initial product is a one-line code integration that enables bot detection avoidance via a forward proxy.

I’ve been creating integrations for websites that lack official APIs for four years; initially using Puppeteer automation, and later through XHR requests.

Many people are familiar with web scraping, but fewer know about scraping via XHR requests. In fact, XHR requests are my preferred method for scraping because they allow you to build reliable and performant integrations into sites that either lack official APIs or restrict their use. I’ve found that building “unofficial” integrations using the XHR method is far more reliable than traditional web scraping approaches. Here’s why:

    •   Modern Websites: Many are built with frontend frameworks that load data asynchronously from backend APIs.
    •   Undocumented APIs: These backend APIs are as robust as official APIs but are left undocumented to the public (though the company knows them well
    internally).
    •   Reliable Integration: You can hook into these backend APIs to create dependable integrations.
    •   Performance: Integrations built via XHR are much more reliable and performant than generic web scraping tools like Selenium, Puppeteer, or Playwright.

While developing integrations using the XHR method, I encountered a significant challenge: anti-bot software like Cloudflare can easily detect that your requests aren’t coming from a browser and block them. These tools are highly effective at fingerprinting your requests.

Many developers might try the XHR method by copying requests from the Chrome DevTools Network tab as cURL commands, only to receive a surprising 403 error. This happens because Cloudflare excels at identifying non-browser requests.

At my previous company, I built all integrations using the XHR method but found that more sophisticated websites were protected by anti-bot software like Cloudflare. I experimented with existing solutions (including numerous supposed Cloudflare bypasses on GitHub and paid services like Zenrows, Scrapingbee, Oxylabs, and Brightdata) but found that they either didn’t work or required unnecessarily complex integrations (e.g., request headers were not transparently passed through to the target server resulting in incorrect responses, or response header cookies were not sent back to the client, and on and on with painful and unreliable edge cases such as these).

This led me to develop xhr.dev’s initial product: a magic proxy that offers anti-bot avoidance with a one-line code integration.

How This Can Help You:

    •   Reliable Scraping via XHR: If you’re scraping via XHR, this tool allows you to hook into a platform’s backend, making it very difficult for the backend to detect that you’re scraping or not a real person.
    •   Unblock When Blocked: If you get blocked, it will unblock you.
    •   Captcha Auto-Solving: If you’re new to scraping and encounter various anti-bot methods like CAPTCHAs, it can automatically solve them for you.

What I’m Looking For:

    •   Customers with Web Scraping Use Cases: Who can provide valuable product feedback.
    •   Feedback on Product Shape: Comments on the current form and functionality of the product.
    •   Insights on Scraping Challenges: Understanding other problems people face when scraping and what solutions they would be willing to pay for.

You can view our historical performance on our status page (https://status.xhr.dev).

I hope you give it a try!

ty v much, john

(also - this is my 2nd ShowHN post - first time around I reposted it - oops! This one is left completely organic)