Btw, if you use Azure's anti-DDoS - it doesn't work against NoName because the rate limiting in Front Door sucks. The best move right now is disable or change the URL they are targeting. It's usually a search page.
NoName can adapt the config to change to a different URL.. but they usually don't bother, e.g. they use the same config that doesn't work on Liverpool.gov.uk for over a year, even today.