title: GET request works in browser but not in POSTMAN - Cloudfare denies it
body: <ol>
  <li>I am trying to access the following API and this is the behavior
  API = <a href="https://api.btcxindia.com/ticker/" rel="nofollow noreferrer">https://api.btcxindia.com/ticker/</a></li>
  </ol>
  
  <p>While accessing this API from Postman , I get the output. However, if I leave my postman open and test after say 10 minutes - Getting output error</p>
  
  <pre><code>Error : &lt;!DOCTYPE HTML&gt; &lt;html lang="en-US"&gt;
      &lt;head&gt;
          &lt;meta charset="UTF-8" /&gt;
          &lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /&gt;
          &lt;meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /&gt;
          &lt;meta name="robots" content="noindex, nofollow" /&gt;
          &lt;meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /&gt;
          &lt;title&gt;Just a moment...&lt;/title&gt;
          &lt;style type="text/css"&gt;
      html, body {width: 100%; height: 100%; margin: 0; padding: 0;}
      body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}
      h1 {font-size: 1.5em; color: #404040; text-align: center;}
      p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}
      #spinner {margin: 0 auto 30px auto; display: block;}
      .attribution {margin-top: 20px;}
      @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% {
  -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }
      @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% {
  -webkit-transform: translateY(0); transform: translateY(0); } }
      .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ease-in-out; animation:bubbles 0.6s 0.07s infinite ease-in-out; -webkit-animation-fill-mode:both; animation-fill-mode:both; display:inline-block; }   &lt;/style&gt;
          &lt;script type="text/javascript"&gt;   //
              &lt;![CDATA[   (function(){
      var a = function() {try{return !!window.addEventListener} catch(e) {return !1} },
      b = function(b, c) {a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b)};
      b(function(){
        var a = document.getElementById('cf-content');a.style.display = 'block';
        setTimeout(function(){
          var s,t,o,p,b,r,e,a,k,i,n,g,f, zHvFeWz={"vFQLFVZTSM":+((!+[]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]+!![]+!![]))};
          t = document.createElement('div');
          t.innerHTML="&lt;a href='/'&gt;x&lt;/a&gt;";
          t = t.firstChild.href;r = t.match(/https?:\/\//)[0];
          t = t.substr(r.length); t = t.substr(0,t.length-1);
          a = document.getElementById('jschl-answer');
          f = document.getElementById('challenge-form');
          ;zHvFeWz.vFQLFVZTSM+=+((+!![]+[])+(+!![]));zHvFeWz.vFQLFVZTSM-=+((!+[]+!![]+[])+(+!![]));zHvFeWz.vFQLFVZTSM*=+((!+[]+!![]+[])+(+!![]));zHvFeWz.vFQLFVZTSM+=+((!+[]+!![]+!![]+!![]+[])+(+!![]));zHvFeWz.vFQLFVZTSM*=+((!+[]+!![]+!![]+!![]+[])+(+[]));zHvFeWz.vFQLFVZTSM*=+((!+[]+!![]+!![]+!![]+[])+(+!![]));zHvFeWz.vFQLFVZTSM+=+((+!![]+[])+(!+[]+!![]));zHvFeWz.vFQLFVZTSM+=+((!+[]+!![]+!![]+!![]+[])+(!+[]+!![]+!![]+!![]+!![]));a.value
  = parseInt(zHvFeWz.vFQLFVZTSM, 10) + t.length; '; 121'
          f.action += location.hash;
          f.submit();
        }, 4000);
      }, false);   })();   //]]&gt;
          &lt;/script&gt;
      &lt;/head&gt;
      &lt;body&gt;
          &lt;table width="100%" height="100%" cellpadding="20"&gt;
              &lt;tr&gt;
                  &lt;td align="center" valign="middle"&gt;
                      &lt;div class="cf-browser-verification cf-im-under-attack"&gt;
                          &lt;noscript&gt;
                              &lt;h1 data-translate="turn_on_js" style="color:#bd2426;"&gt;Please turn JavaScript on and reload the page.&lt;/h1&gt;
                          &lt;/noscript&gt;
                          &lt;div id="cf-content" style="display:none"&gt;
                              &lt;div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                              &lt;/div&gt;
                              &lt;h1&gt;
                                  &lt;span data-translate="checking_browser"&gt;Checking your browser before accessing&lt;/span&gt; btcxindia.com.
                              &lt;/h1&gt;
                              &lt;p data-translate="process_is_automatic"&gt;This process is automatic. Your browser will redirect to your requested content shortly.&lt;/p&gt;
                              &lt;p data-translate="allow_5_secs"&gt;Please allow up to 5 seconds&amp;hellip;&lt;/p&gt;
                          &lt;/div&gt;
                          &lt;form id="challenge-form" action="/cdn-cgi/l/chk_jschl" method="get"&gt;
                              &lt;input type="hidden" name="jschl_vc" value="dbc7ac6d545de8521a2a3f24574a78a4"/&gt;
                              &lt;input type="hidden" name="pass" value="1516515065.895-rdlkMQJ0RT"/&gt;
                              &lt;input type="hidden" id="jschl-answer" name="jschl_answer"/&gt;
                          &lt;/form&gt;
                      &lt;/div&gt;
                      &lt;div class="attribution"&gt;
                          &lt;a href="https://www.cloudflare.com/5xx-error-landing?utm_source=iuam" target="_blank" style="font-size: 12px;"&gt;DDoS protection by Cloudflare&lt;/a&gt;
                          &lt;br&gt;
              Ray ID: 3e081d20db788866
  
                      &lt;/div&gt;
                  &lt;/td&gt;
              &lt;/tr&gt;
          &lt;/table&gt;
      &lt;/body&gt; &lt;/html&gt;
  </code></pre>
  
  <ol start="2">
  <li>However, if the same API when tested from Browser this doesn't fail even if I try multiple times.</li>
  </ol>
  
  <p><strong>EDIT-1</strong>
  Thank you for the comments. I am trying to provide more details. Please find the attached picture from DEV tools
  <a href="https://i.stack.imgur.com/i7V46.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/i7V46.png" alt="enter image description here"></a></p>
  
  <p><strong>STEP 1</strong>: Executing the request in POSTMAN . Please find the result</p>
  
  <p><strong>Following were the auto populated header details I could find</strong> </p>
  
  <pre><code>alternate-protocol →443:spdy/3.1
  cache-control →no-store, no-cache
  cf-ray →3e19a7fc98652f11-DEL
  content-encoding →gzip
  content-type →application/json
  date →Tue, 23 Jan 2018 09:16:48 GMT
  expect-ct →max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
  expires →0
  pragma →no-cache
  server →cloudflare
  status →200
  strict-transport-security →max-age=31536000
  vary →Accept-Encoding
  </code></pre>
  
  <p><strong>Cookie Details</strong>
  <a href="https://i.stack.imgur.com/ILoa3.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ILoa3.png" alt="enter image description here"></a></p>
  
  <p><a href="https://i.stack.imgur.com/RRH2U.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/RRH2U.png" alt="enter image description here"></a></p>
  
  <p><strong>STEP 2 : After 5 minutes, I am just clicking send on Postman - I get the following the error</strong></p>
  
  <pre><code>&lt;!DOCTYPE HTML&gt; &lt;html lang="en-US"&gt;
      &lt;head&gt;
          &lt;meta charset="UTF-8" /&gt;
          &lt;meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /&gt;
          &lt;meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /&gt;
          &lt;meta name="robots" content="noindex, nofollow" /&gt;
          &lt;meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /&gt;
          &lt;title&gt;Just a moment...&lt;/title&gt;
          &lt;style type="text/css"&gt;
      html, body {width: 100%; height: 100%; margin: 0; padding: 0;}
      body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}
      h1 {font-size: 1.5em; color: #404040; text-align: center;}
      p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}
      #spinner {margin: 0 auto 30px auto; display: block;}
      .attribution {margin-top: 20px;}
      @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% {
  -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }
      @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% {
  -webkit-transform: translateY(0); transform: translateY(0); } }
      .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ease-in-out; animation:bubbles 0.6s 0.07s infinite ease-in-out; -webkit-animation-fill-mode:both; animation-fill-mode:both; display:inline-block; }   &lt;/style&gt;
          &lt;script type="text/javascript"&gt;   //
              &lt;![CDATA[   (function(){
      var a = function() {try{return !!window.addEventListener} catch(e) {return !1} },
      b = function(b, c) {a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b)};
      b(function(){
        var a = document.getElementById('cf-content');a.style.display = 'block';
        setTimeout(function(){
          var s,t,o,p,b,r,e,a,k,i,n,g,f, gabJCII={"Hoov":+((!+[]+!![]+!![]+[])+(!+[]+!![]))};
          t = document.createElement('div');
          t.innerHTML="&lt;a href='/'&gt;x&lt;/a&gt;";
          t = t.firstChild.href;r = t.match(/https?:\/\//)[0];
          t = t.substr(r.length); t = t.substr(0,t.length-1);
          a = document.getElementById('jschl-answer');
          f = document.getElementById('challenge-form');
          ;gabJCII.Hoov-=+((!+[]+!![]+!![]+[])+(!+[]+!![]));a.value = parseInt(gabJCII.Hoov, 10) + t.length; '; 121'
          f.action += location.hash;
          f.submit();
        }, 4000);
      }, false);   })();   //]]&gt;
          &lt;/script&gt;
      &lt;/head&gt;
      &lt;body&gt;
          &lt;table width="100%" height="100%" cellpadding="20"&gt;
              &lt;tr&gt;
                  &lt;td align="center" valign="middle"&gt;
                      &lt;div class="cf-browser-verification cf-im-under-attack"&gt;
                          &lt;noscript&gt;
                              &lt;h1 data-translate="turn_on_js" style="color:#bd2426;"&gt;Please turn JavaScript on and reload the page.&lt;/h1&gt;
                          &lt;/noscript&gt;
                          &lt;div id="cf-content" style="display:none"&gt;
                              &lt;div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                                  &lt;div class="bubbles"&gt;&lt;/div&gt;
                              &lt;/div&gt;
                              &lt;h1&gt;
                                  &lt;span data-translate="checking_browser"&gt;Checking your browser before accessing&lt;/span&gt; btcxindia.com.
                              &lt;/h1&gt;
                              &lt;p data-translate="process_is_automatic"&gt;This process is automatic. Your browser will redirect to your requested content shortly.&lt;/p&gt;
                              &lt;p data-translate="allow_5_secs"&gt;Please allow up to 5 seconds&amp;hellip;&lt;/p&gt;
                          &lt;/div&gt;
                          &lt;form id="challenge-form" action="/cdn-cgi/l/chk_jschl" method="get"&gt;
                              &lt;input type="hidden" name="jschl_vc" value="f4e119ff9275afc0a1dd291cd3ecf994"/&gt;
                              &lt;input type="hidden" name="pass" value="1516699334.127-JXvj0i+E1V"/&gt;
                              &lt;input type="hidden" id="jschl-answer" name="jschl_answer"/&gt;
                          &lt;/form&gt;
                      &lt;/div&gt;
                      &lt;div class="attribution"&gt;
                          &lt;a href="https://www.cloudflare.com/5xx-error-landing?utm_source=iuam" target="_blank" style="font-size: 12px;"&gt;DDoS protection by Cloudflare&lt;/a&gt;
                          &lt;br&gt;
              Ray ID: 3e19afdd4f322f11
  
                      &lt;/div&gt;
                  &lt;/td&gt;
              &lt;/tr&gt;
          &lt;/table&gt;
      &lt;/body&gt; &lt;/html&gt;
  </code></pre>
  
  <p>Header details</p>
  
  <pre><code>cache-control →no-cache
  cf-ray →3e19afdd4f322f11-DEL
  content-type →text/html; charset=UTF-8
  date →Tue, 23 Jan 2018 09:22:10 GMT
  expect-ct →max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
  server →cloudflare
  status →503
  x-frame-options →SAMEORIGIN
  </code></pre>
  
  <p><strong>Cookie details</strong>
  <a href="https://i.stack.imgur.com/IIgyd.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/IIgyd.png" alt="enter image description here"></a></p>