Grok Bot Cloudflare Sorry you have been blocked Error 1015

This page as markdown: https://aluvia.io/unblock/cloudflare.md

Updated 2026-09-28 · Aluvia

Grok Bot's own Chrome, or a cloud agent's own Chrome, is on a shared datacenter IP, so the tab shows Sorry you have been blocked, Error 1015, or verify you are human. A cloud agent Chrome verify you are human Cloudflare challenge is that same card. Your laptop can still open the URL, because that request leaves from your home connection.

Cloudflare's own Error 1015 notes ask you to wait and to give the site owner the Ray ID. CapSolver and Turnstile writeups ask you to beat the check. This page is not a bypass and not a solver. Run a bounded test of a country exit on that same host. Use one residential or mobile address, reload once, and stop.

A country exit only sometimes changes this card

A residential or mobile IP only sometimes helps, when the edge is reacting to a datacenter IP. A home connection supplies a residential address, and a phone network supplies a mobile address.

It does not beat fingerprint, Linux Chrome, TLS, or canvas. It is not a login bypass. The page is not a CapSolver or Turnstile solve tutorial. Error 1015 is also a rate limit, so wait and reduce requests.

Match the line on the card

Sorry you have been blocked is the line across the card. Error 1015 means Cloudflare is rate limiting this client. Error 1020 Access Denied is a firewall rule. Please verify you are a human is the longer challenge, and a Turnstile infinite loop is that challenge coming back after every click. If it never settles, follow when a human check keeps returning.

Treat a pure rate limit as a Ray ID problem

When Error 1015 is pure rate limiting, the Ray ID is the long code at the bottom of the card. Note the Ray ID, wait, and reduce requests. If the block persists, give the site owner the Ray ID.

Set up Aluvia where this Chrome is open

Ask your agent to run npx aluvia-cli setup on the computer where this Chrome is open. We built Aluvia as a local CLI and proxy daemon for that browser, so the next request can leave through a residential or mobile address. You need Node.js 18 or later and a Chrome or Chromium that launches. A shell on another computer cannot configure this one, and the first setup can restart Chrome. Save open work first.

The first 10 MB is free, then 2 USD per GB. Country only, not a city. Aluvia is not a human VPN and not an MCP. aluvia geos lists countries. aluvia proxy-on --geo US is the example, or name the country the job needs. What setup changes.

The command to give your agent

npx aluvia-cli setup

First 10 MB free. No account, API key or payment is required. Then 2 USD per GB. No target page URL is required. Follow the quickstart for result checks and undo.

What the page says

Any of these is a string the page showed:

• Checking if the site connection is secure
• Verify you are human
• Sorry, you have been blocked
• Error 1020
• Error 1015
• Please verify you are a human
• Un instant…
• Vérification de sécurité en cours

Read setup's JSON before the next command

Read the JSON setup prints. ready: true confirms the local proxy and the upstream check, not access to the target site. If setup stops early, follow next. If aluvia is missing, use npx aluvia-cli.

List countries before you pick one

Setup already uses the global pool. Print the list when the job names a country.

aluvia geos

Name the country this job needs

Pass US when the list includes it and the page should see the United States. Otherwise pass the country the job needs. Sticky sessions last up to 30 minutes.

aluvia proxy-on --geo US

Reload once and judge the page itself

Reload the same URL and read the page, then run status. A ready proxy is not proof that the visit worked.

aluvia status

Rotate a single time, then stop

If the card still looks like a datacenter score, make one rotation and reload. If the page does not change, stop and keep the error. For a rate limit, wait and reduce requests, and do not rotate.

aluvia rotate-ip

Stop with the Ray ID if the card remains

If Sorry you have been blocked remains after that rotation, copy the card and the Ray ID and stop.

Turn the country exit off

Chrome stays open. Run this when the job is done, or when the country exit did not help.

aluvia proxy-off

When the trial data is used up

If a command returns payment_required, show its actual claim_url to the person who pays. They can claim the account and buy data at 2 USD per GB, then the agent runs aluvia auth login. Do not invent a claim link or print an API key. Payment handoff.