I have a person asking me whether the DDoS Mitigation Service they're using is worth it. This is out of my expertise, but clearly at some point someone sold this service to the client.Assuming I don't have anything but a domain name, what information can I gather about whether they are indeed under attack and/or how well the DDoS Mitigation Service is working?Assume I don't have any administrative access to the site/server(s) in question.
How would I tell if a prospective client website is under DDoS attack?
security;server