There are antibot measures that do not depend on JS or cookies, like asking the name of a Red fruit, and the server adding the IP to allowed. Very easy to bypa

There are antibot measures that do not depend on JS or cookies, like asking the name of a Red fruit, and the server adding the IP to allowed. Very easy to bypass for sure, but custom enough to protect you from the horde of generic bots =p