freeCodeCamp.org Discourse가 스팸 스크립트로 무너지고 있습니다

I don’t see why it’s strange if there can be requests without js based analytics showing anything.
The spammer can use the same endpoints as the javascript does, without javascript. No javascript based analytics would trigger