Per-phone limit
Four verified requests for one number against a limit of three. The fourth is refused with a Retry-After header — one phone cannot be spammed with OTPs.
Expected HTTP 429 · rate-limited ×4
Result
Submit the form to run this case.
Cloudflare Turnstile · phone validation · rate limits
Four verified requests for one number against a limit of three. The fourth is refused with a Retry-After header — one phone cannot be spammed with OTPs.
Submit the form to run this case.