Your initial comment said "but QVC (by this time) should have rate limiting / throttling per IP." If you have 1 or 2 requests from an IP then rate limiting thos

Your initial comment said "but QVC (by this time) should have rate limiting / throttling per IP." If you have 1 or 2 requests from an IP then rate limiting those requests does nothing. Your other suggestions are certainly interesting, and you may have implied those solutions - but that's not what you originally said. You said rate limiting by IP is enough. It is not.