My quess is that DDoS will give for example 307 response for first HTTP request and sets some sort access token to browser for next requests. Maybe eaven requiring multiple TLS handshakes before access to site is allowed. That forces DDoS attacker to do multiple request to get single request on site. Maybe on that process some trick what Akamai uses on that process, won’t work properly on Sailfish browser.