Stop Spam from Contact Form? Can they see admin store email

[printchic]

[Note: remember to include site URL, ZC version, list of plugins, PHP version, etc ... read the Posting Tips shown above for information to include in your post here.
And, remove this comment before actually posting!]

Zen Cart 1.56c
westickerthang(dot)com/decalstickers/ is the store

I'm trying to stop the increasing influx of spam to my store. I have tried everything to now avail.

Things I've tried to prevent spam from happening;

1.) Used Captcha
- Have honey pot set
- also have numinix math captcha installed
(still got spam)
- I have also used google's chaptcha (on a different store but still get spam)

2.) IP Blocking but because I keep getting lots of hits from china, Russia, etc. it's too many to use that approach.
3.) Tried to block them using .htaccess but it bogs down the file
(still got spam)

Thinking it's possible my store's admin email address was captured I;
4.) Changed to a new email address yesterday and disabled the old one email address
(still got spam and now it shows the New Email address)

I realize that it's possible someone could be sitting at the computer and typing in the information so I decided to
5.) disabled the SEND NOW button

Shortly after doing so I still got SPAM

I can't think of anything else to do. Is it possible for bots to find the admin email address on the website? I ask because the new email address I created is now showing when I get spam. Even though I have disabled the SEND NOW Button spam still is coming and with a new email address for the store. So I can't figure out how this is happening.


Is there a way to disable the form from sending emails (currently i just have the button disabled) without disabling emails completely. I want customers and myself to get emails if purchases are made.

As far as customers being able to contacdt me I have a "live chat" button on each product where they can send a message.

Since I have changed to an new email it believe they are using the contact us form or at least are getting the email address somehow.

Any suggestions would be greatly appreciated.

Oh... alot of the spam is foreign characters.

Finally, back in 2020 before I started getting a lot of spam I got a spam email bragging they can send email to all contact forms. I don't know if they are doing this but it may give some insight on what spammers are doing. I've attached the spam email sorry it's so long I had to make 4 pdf files.

[lat9]

Give Access Blocker (https://www.zen-cart.com/showthread....Support-Thread) a try.

[printchic]

site timed out before I could edit and add spam emails to my original post. I'm attaching them here;

[printchic]

Give Access Blocker (https://www.zen-cart.com/showthread....Support-Thread) a try.

Thank you. I've installed hope it helps.

[lat9]

Thank you. I've installed hope it helps.

Noting that Access Blocker works best with an account/API-key from https://ipdata.co.

[printchic]

Noting that Access Blocker works best with an account/API-key from https://ipdata.co.

I also applied for the key and installed it too. Thanks for pointing it out thou.

[lat9]

I also applied for the key and installed it too. Thanks for pointing it out thou.

Having that API key will let ipdata.co help, too. You can, for instance, now block accesses by country-of-origin.

[printchic]

Having that API key will let ipdata.co help, too. You can, for instance, now block accesses by country-of-origin.

Lat9 thanks so much for the recommendation about access.blocker. I love that it can block countries which is what I want.