I run a site which gets around 60k real MAUs per month and have had to deal with this in some shape or form. I haven't given it as much attention as you have th

I run a site which gets around 60k real MAUs per month and have had to deal with this in some shape or form. I haven't given it as much attention as you have though, because it started to feel like whack-a-mole like you describe and other things took priority. I've concluded that the most viable long term solution is to move most pages behind a login wall. And only keep a page public if I see the ROI from the page being scraped by AI bots, Google, etc... for you this could be only the really high-profile donor pages, but not the long tail pages. Once pages are behind a login wall, we can track anomalous activity at a behavioral / account level and automatically suspend those accounts. For example, an account visiting every donor page will be easy to detect.