@SuperDicq Generally it's best to go in the opposite direction;
<script>
/* GPLv3-or-later */
document.head.innerHTML = '<meta charset="UTF-8"><title>JavaScript detected</title>'
document.body.innerHTML = 'We have detected that you have JavaScript enabled in your browser, please disable it to continue. Why is your browser automatically running malicious JavaScript?'
</script>