Against a small-time operator or one with a very outdated approach to hosting, maybe. Most decent sized sites now have DDOS protections and manual scaling if no

Against a small-time operator or one with a very outdated approach to hosting, maybe. Most decent sized sites now have DDOS protections and manual scaling if not auto-scaling. And these days human traffic at many sites pales in relation to bot traffic.