X-Forwarded-For (Just like rate limit bypass)
Remove captcha token
Change request method
Reuse captcha tokens