note: you can add a ?sitekey param to set your own sitekey; make sure to whitelist the domain!
btw /challenge is the under attack WAF challenge