Proxies for B&H Photo meet Cloudflare at the door and F5 Shape behind it, with a pricing twist most retailers do not have. On August 24, 2026, we sent bhphotovideo.com a plain request from a home connection and it loaded the site, HTTP 200, with F5 Shape telemetry in the page. Our request from a datacenter server, sent by a different client, got Cloudflare's "Just a moment" challenge, and in October both addresses and both clients were challenged (the re-test). So the door is Cloudflare, and F5 Shape rides on top to score whatever gets in. Two layers, two jobs, and a pricing quirk that changes what the numbers mean.
B&H is the large New York photo, video and pro-electronics retailer, and its data is worth reading for pro-gear prices, deep used inventory, and the Payboo tax rebate that quietly changes the effective price. The buyer here is technical and serious, so the details matter.
What proxies work best for B&H Photo?
US rotating residential proxies behind a real browser, one exit per session because Shape scores behavior. A static ISP proxy for a logged-in account. Datacenter proxies get challenged on contact.
Cloudflare scores the IP, Shape scores the session
The two layers punish different mistakes. Cloudflare reads the TLS fingerprint, and in our October re-test the client changed more answers than the address did, so a bare client is challenged regardless of the IP (how to scrape past Cloudflare, what is JA3/JA4 fingerprinting). F5 Shape then scores the session's behavior over time and acts once it looks automated (how to handle F5 Shape). The working combination is a real browser to pass the fingerprint gate and satisfy Shape, a residential exit so volume does not pile up on one network, and one consistent exit per session so Shape does not see a mid-session IP swap. Newegg shares the Cloudflare half of this (proxies for Newegg).
Payboo makes the sticker price misleading
B&H's Payboo card instantly rebates US sales tax at checkout: B&H still collects and remits the tax, but the buyer is reimbursed the tax amount on the spot, so a Payboo user effectively pays the pre-tax price even in a high-tax state (AppleInsider, B&H Payboo FAQ). For a price-comparison project that is a real distortion: the listed price looks the same as a competitor's, but the effective paid price for a Payboo user is lower by the local tax rate, and a dataset that ignores it will misjudge B&H's competitiveness market by market.
Two more pricing wrinkles round out a complete read. B&H runs a large used department with condition-graded pricing, so a model has a new price and one or more used prices. And some manufacturer-restricted (MAP) items hide the price until the item is in the cart, a common pro-gear pattern, so a scraper has to add to cart to reveal it.
Listed price
what a scraper sees first
Cart-revealed
MAP items hide it
New vs used
graded pre-owned pricing
Payboo effect
minus local sales tax
Which proxy type fits which job
| B&H job | Proxy type | Why |
|---|---|---|
| Pro-gear price monitoring | US rotating residential, one exit per session | Cloudflare plus Shape score IP and behavior |
| New-vs-used price capture | Rotating residential | Two price regimes per model |
| Cart-revealed (MAP) price capture | Sticky residential per session | Requires an add-to-cart flow |
| Stock and restock alerts | Rotating residential | Volume across a pool |
| Account, cart, checkout | Static ISP | The session must hold one address |
| Parser tests against saved HTML | Residential (datacenter is challenged) | Datacenter draws the challenge |
Rotating residential IPs pass Cloudflare and start clean with Shape, and ISP proxies hold one address for an account or a cart flow. How they differ is covered in rotating vs static residential proxies.
Setup
Drive a real browser and behave, because Shape is watching the session (proxies for Playwright). Hold one residential exit per session, and rotate between sessions. For MAP items, run the add-to-cart step to reveal the price. Capture new and used prices separately, and record the local tax context so the Payboo-effective price can be computed. Pace like a shopper.
Sizing
Size by sessions, because Shape scores the session, and by request rate for Cloudflare. Decide how many pages one shopper-paced session reads before a challenge, and add exits. The cart-reveal flow costs more requests and bandwidth per item, so budget for it (headless browser proxy bandwidth cost). Accounts are one static ISP address each, and our pricing is pay-as-you-go with a balance that does not expire.
Free versus paid for B&H Photo
Our test settles it: a datacenter IP got the challenge while a residential IP loaded. Free proxies confirm a page loads from a clean residential IP, which our free proxy list and proxy checker cover. Monitoring price and stock needs residential from $0.44/GB pay-as-you-go behind a real browser. The line is in datacenter vs residential proxies.
Staying unblocked
- Do not rotate mid-session. Against Shape, an IP swap inside a session is a bot tell.
- Do not retry the challenge from the same datacenter address. Cloudflare has scored it; use a residential exit.
- Capture new, used and cart-revealed prices separately. One blended number is wrong.
- Record the tax context. The Payboo-effective price is the real comparison.
- Watch the challenge rate. A rising share means slow down or widen the pool. The full list is in avoiding IP bans while scraping.
What a proxy does not do here
A proxy gives a browser a trusted, consistent residential address so it can read past Cloudflare and satisfy Shape. It does not make a headless client behave like a person, does not reveal a MAP price without the cart step, and does not compute the Payboo-effective price for you. Scraping bhphotovideo.com runs against its terms of use, a risk that stays with you regardless of the IPs. What a residential exit does is load the site the datacenter IP could not and keep a well-behaved session trusted, after which reading new, used and Payboo-adjusted prices correctly is the real work. Test with the free proxy list, then monitor with residential from $0.44/GB.
Sources
- AppleInsider, B&H Payboo credit card FAQ: how the no-sales-tax discount works: the instant sales-tax rebate.
- Cloudflare, bot management and managed challenges: the layer that served our datacenter challenge.
- F5, Shape / Distributed Cloud Bot Defense: the session-scoring layer present in the page.
- HProxy test on August 24, 2026: identical plain GET to bhphotovideo.com from a residential IP (HTTP 200, site loaded, Shape telemetry present) and a datacenter IP (Cloudflare Just a Moment challenge).
