Why did you serve it from DigitalOcean?

Why not a CDN?

It's the content of the page, the raw html, that is replaced with a zipbomb. Example: https://example.com checks if you are a malicious bot, depending on the result, it will send you gzip html or gzipped bomb. So that can't be swapped or redirected to a CDN. The bots would simply ignore the redirect.

	▲	le_curious a day ago \| parent [-]
		That sounds really annoying. Thanks for explaining! I'm looking to launch one of my new little products and my last one got hammered by bots. Thankfully they were not really malicious like some of the other folks have experienced, but it was still frustrating.