Takeaways
The server is unwilling to risk processing a request that might be replayed, which creates the potential for a replay attack.
The request will not be processed, it looks suspicious.
The server is unwilling to risk processing a request that might be replayed, which creates the potential for a replay attack.
425 Too Early | The HTTP Working Group
MDN web docs