Layer 7 DDoS
Layer 7 (Application) DDoS attacks aim to overwhelm web servers with seemingly legitimate HTTP requests. Unlike volumetric attacks (L3/L4), these attacks are more sophisticated and harder to detect because they mimic real traffic.
Imagine a physical store invaded by thousands of people pretending to be customers. They walk in, ask about prices, occupy the registers, but never buy anything. The store can't serve real customers and eventually shuts down. L7 DDoS does this to your site.