

The downvotes are all coming from accounts on other instances, which as @ValueSubtracted@startrek.website suggested, makes us think it’s most likely people browsing “All” and not appreciating seeing twenty discussion posts (not that that justifies it).
Minimal, but it is the domain that gets blocked so the attacker would still need to purchase a new domain.