noscript vs. mouser.com

[leres]

Recently, mouser.com has started randomly and frequently redirecting me to a captcha page because it thinks I'm a robot:

I've called them a couple of times. First they told me to disable noscript for a few minutes and turn it back on. Last time I called they denied having a robot page and told me my computer was probably infected.

What's really going on here? I'm running firefox 46 under FreeBSD 9 and es, I'm running noscript (and adblock plus) but had already whitelisted all servers that mouser.com uses.

[barbaz]

Only time I've seen that is on another site when I was on a shared network. (The wording of that message in your screenshot is oddly similar, if not the same, to what I saw...)

Are you on a shared network or "your" Internet connection?
Do you actually regain access after solving the CAPTCHA?

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)


EDIT

Last time I called they denied having a robot page and told me my computer was probably infected.

Well, it's true that your connection to that site _is_ over plain HTTP so is susceptible to tampering/MITM...

[leres]

Are you on a shared network or "your" Internet connection?
Do you actually regain access after solving the CAPTCHA?

When this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

This is at home so I have a few systems behind nat but only one is trying
to go to mouser.com at the time. I always get access after (successfully)
completing the captcha.

Great suggestion about checking the console; I bet this is my problem:

Code: Select all

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://m.addthis.com/live/red_lojson/100eng.json?sh=0&ph=1701&ivh=929&dt=539831&pdt=2828&ict=&pct=0&perf=widget%7C2828%7C149%2Cboost%7C4235%7C34%2Clojson%7C4309%7C32%2Csh%7C4662%7C481&rndr=render_toolbox%7C4791&cmenu=null&ppd=0&ppl=0&jsfw=jquery&pro=0&ba=3&sid=572a43895fe77264&rev=v5.12.0-wp&pub=ra-4f4d0a4906d18110&dp=www.mouser.com&fp=ProductDetail%2FCirrus-Logic%2FCS8416-CZZ%2F%3Fqs%3DbUPhaerQQeHHDipRlg8hyw%253D%253D&pfm=0. (Reason: CORS header 'Access-Control-Allow-Origin' does not match '*'). <unknown>

But if so I don't know enough about noscript to whitelist it.

[barbaz]

No that's not it, addthis is a nasty tracker so it's just as well that's blocked.

Does disabling NoScript (Tools > Add-ons Manager > NoScript > Disable > Yes, remove ALL protections) actually the site stop serving you that CAPTCHA page?