Has the Faucetbox Script an CSRF protection?
If you're asking about Faucet in a Box script, then no, there's no CSRF protection.
If you're asking about FaucetBOX.com itself, then yes, there's a CSRF protection. You can also enable MFA, that will also prevent any CSRF in case our protection fails.
are payments which time usually processed ?
It's random, but always at least once every 48 hours. Usually it's about every 24 hours.