Cloudflare: "Checking if the site connection is secure" / "Verify you are human"

This is a Cloudflare challenge page (also called an interstitial). It holds the request until the browser proves it is a real visitor. Older versions said "Checking if the site connection is secure"; current versions say "Verify you are human" and may show a Turnstile checkbox. The page title is usually "Just a moment...". Cloudflare's documentation says challenges evaluate client-side signals from the browser environment and that most visitors pass automatically.

A challenge requires JavaScript and a full browser. Cloudflare notes that challenge pages fail for non-HTML requests such as fetch, XHR or API calls, so an HTTP library receives the challenge HTML (often with status 403 or 503) instead of the content. Responses that are challenges carry the header cf-mitigated: challenge, which lets clients detect them.

For automation, a challenge means the owner wants to filter non-human traffic on that path. Solving or bypassing it programmatically defeats the owner's policy.

HTTP/1.1 403 Forbidden
Server: cloudflare
cf-mitigated: challenge
Content-Type: text/html; charset=UTF-8

<title>Just a moment...</title>

Integrators: never point production automation at pages protected by challenges; agree an API or allowlisted access with the owner. Site owners: scope challenges to the paths that need them, exclude API endpoints that machines legitimately call, and monitor the challenge solve rate to spot false positives.