What now, Subeta?!
This is a standard procedure, especially in times of high traffic (some of which is automated, from people running bots etc). We use a service called cloudflare to just validate that the page is being observed by a browser and not a script.
Here is a fairly old answer on security exchange about it.
💖 ✨ 🤗