You're right (my bad), they now use AWS. I imagine they're either using some other DDoS product or spun up something simple that does basic prevention, likely v

You're right (my bad), they now use AWS. I imagine they're either using some other DDoS product or spun up something simple that does basic prevention, likely via CAPTCHA for suspect traffic. ReCAPTCHA is basically the industry standard when it comes to CAPTCHAs, so whomever likely just went with that instinctively.