Recaptcha UNEXPECTED_ENVIRONMENT riskAnalysis reason

I cannot find any detailed explanation on the meaning of this response. Our website is frequently receiving it but we cannot take any action based on it as it is vague. I would appreciate it if someone could please explain.

1 4 835
4 REPLIES 4

ErikaB
Community Manager
Community Manager

@shannonmodaramo  What response are you receiving? 

Here is an example:

 

{"name":"[[name]]","event":{"token":"03AFcWeA56lWMuemdNLCbfHRdOu_YXne3A5gy2RcAgYPoo6ES0EERZ0MJkovTAPXHQDavbC8foNa_br0TgLyQLVGqBFH6meEM80EzSQURsM4J-sTcb0PNYvkitriG8j4dkyDKBc9qrwHPoyqnVDEdpYvLFyH3zQMGen5wka4e0sG12LaSubtnrKaN3iMn-ZeUtNKjgTxGtwIyNvWoe9_12vT6W_g80EwStaOAOj9CNuFvsSQaBce8iY6Mx3C8wpoRx4IShIKQayyq4_i8hvKoSsm7AvQJXo9oEPvqlLwIYXODEVjPosckMkwW_4m89EPpsF44HTS7AFMkKta45fJFV5tIx40tIXyQGbLbHHYttTnME5EDw_aVTkYbD0X219Yqwy433XdiEIQbd_ekLm6bMIPuVjkbkSIrJYR7sqYyjjIQR3VqdS_zZIh4IYWm_eb-qXwXXG9RjaMaI9vPqFDagNBuJXp8jrzfvv0gcq0db3R0SuQdabvMDnvUiBtxyiWBP3QhaS14tMf9Q65wJF9CCippI7ts4IIgXs-8jUVwRXXIFynD4shk7cOfwIVFu2U-z4v0D9xK6fOmklmSp0Q9YhC4FdZKpg4_SRol4uRTwYVisq-4I56nlCDmNC5gYhH7YI7_be0lXfoCOVtiBGF1aguKuWMHU7wJvBfm8TpDmKAo45spJeaSh_qr1c6gjXLmno-a4O0gtzEmtpb19704dMxxsGUJpd4Kf_XmrF1r5w55HGGLHzJGa6ueWGF21vDvsff4eQCWol2ny9deLhUNGLXw18otcVU9vwJrELwy9sesSJldZ6LPdb7vmCA8rcdk7bYeyyAeJoqBDPGPxJKKO8IWFGOtPtKON0X6ve60phGJRT9beVLCe7HMi14Rnk9qGjTdji9CMkQ0SwjMhu1VeiJpogVr_3njmbPZl0heXzXsQ7Kom3RJZLKC7ziNpFEk8fT8M_Y9m87d4A6kNFMI80FFihSD5wpgP85OvYINMzVW1sUV639NDViXdLCQjiaTMrpENUirdyceboPhoj_ozPn7kMY37z5Enk9SUOhO-6chP5VhZ3mXwAe6or0MPevBi4lqtEdpPpHVepIOkD-uo2IK4D-yyrUwNS3n6yR9YjpUDsL6E8W5tVIPbEiNRxwSPGK2DzbT2e90hR7bYAOPf4E87qjMZ0SzPDcuzgU4i7GH8U91Gs_3XreyWaxHc4XknxMDoOLSlzr-8G44t6DxusrVqY9jHedHFv8IZfz5fosBWbb0VOHBk31NFVJLIo5FqVgcpXOMy35G2cuK_3RS01MvACSVZGwRtNNe27Rr_1Iy-9yTHDadptcczgCVOXs0mBiuN5M-1fJbqtb5GXRxHE_osOw7igYWGF5ksxHdCG2roB0NL9_BGt0uhgc2-dy90TjqEZlI4IdhgNupaP0pPzmKwSPgwvJHqm9Rr1r_rsHDU2K2ALzfRiB3lf_LImdr9kBr57p23BOuSqGClD3cAJFW6S93eVwBqHnXNvS85cBR726eRSai8dfuW6_4SNqMP0PUQrOuHOrGb8XNGq23s9jgnl6EObnnQV7lQTOqyacxnYQwZNQSKDgAQf5yJzlxpagRE5--rf8rMi3_jX61VTfD-VU8RqReTprou7Nxt_O7P_t_WIH6NGTtqlgHd6fsHpVFVOhP_lwGcCcLclUQtu-4wNpreclZXM1SDxfQsQaG1tHgL9UtGdoAoITdHAOIww2hfKyCBmvm2jWqwZ0kfpzUWtgG9pocHdP0A-zPC6mbqr4u0hBEmdvVbgyODGw3e42SJ6gGP4HE23tF7c94HeSInesyAZWr9YYzsFZAFzS4i34C8gJNmaDMVSw7T7YJEErBxVpu9cjOGWWiS5gRLyzlXRwAvQB8oJkhDtb5gtbYIq-DgZ8nrL_R3p1ex58guq1GL25d3Yfe_gh4kuvB84ZQhoaJ1GFHTgHq7jleEa0rJDyjBHvhi0b0Mo_dPyn7W4X4KFrw300B_Q2a_iUtARMfYTN0tRGB2SeTETFWf-g7I-Lm2aoQ3OAY-_Ax0PaxA99kzJ8AFumc2QY7D4ViTddmROknbt1uVWoSIA7Znfh9Ybx3HI9vALSGWNChL6mgGcQB4gWV2q314Gr5nrWnVDUoGMA_4KsPUbog08j4koIsx0xmlFf25tqN8vl5bC1zXIvCpFqyqven-oQbHZgNf0pdMrKmUPNW1S6_TSjLiJa2A5Ofpq0EqAlA","siteKey":"[[siteKey]]","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","userIpAddress":"174.245.114.236","expectedAction":"signup","hashedAccountId":"","express":false,"requestedUri":"","wafTokenAssessment":false,"ja3":"","headers":[],"firewallPolicyEvaluation":false,"fraudPrevention":"FRAUD_PREVENTION_UNSPECIFIED"},"riskAnalysis":{"score":0,"reasons":["UNEXPECTED_ENVIRONMENT"],"extendedVerdictReasons":[],"challenge":"CHALLENGE_UNSPECIFIED"},"tokenProperties":{"valid":true,"invalidReason":"INVALID_REASON_UNSPECIFIED","hostname":"[[hostName]]","androidPackageName":"","iosBundleId":"","action":"signup","createTime":"2024-12-12T15:03:22.156Z"},"accountDefenderAssessment":{"labels":[]}}

I assume that your question is in a production environment (not dev, not local ambient)

Is your root link the same as the one you declared in your Google Cloud?

I take this opportunity to ask if this type of response (or "reason") is normal in local development environments or dev.

In url ( https://cloud.google.com/recaptcha/docs/reference/rest/v1/projects.assessments#invalidreason) appears this definition,

UNEXPECTED_ENVIRONMENTThe event originated from an illegitimate environment.

But, I think this definition does not clarify anything.

Any advice or answer will be well received.

Thanks in advance