Hot answers tagged

9

Yes, different email obfuscation methods do work with varying degrees of success. But each has to be weighed with whether they affect the ability for your customers to communicate easily with you. I wouldn't want to be losing any business just because a user finds it annoying or time consuming to contact me. It would be a particularly ...


4

The answer is to not use a captcha, or use something in addition to it. Look to alternate methods such as hidden form fields that should never be filled in. Bots will most likely still fill them in, your validation will know immediately that it is a spammer. Another method would be the time based trigger. If a bot hits page then fills out a form, it will be ...


2

No. It is not Google. Google would not POST /xmlrpc.php. This may be a vulnerability probe or an attack against an existing vulnerability that may or may not exist on your site. 185.62.188.98 is hosted-by.blazingfast.io. When you see something like hosted-by as a sub-domain, it is a webhost, obviously, but also an anonymous address block where the server ...


2

This kind of spam prevention is usually provided by the reCAPTCHA service from Google. IMHO this is an advanced spam protection service based on the principles of CAPTCHA. While I do not think reCAPTCHA is a technical name and there could also be other advanced implementations of CAPTCHA-like spam protection.


2

There is not a common or default email address that you should create for your website. Speaking of experience, I suggest to make any e-mail account you want and publish it to your e-mail account, preferably as an image in order not to being fetched by spam bots. No service provider or company or institution will try to legitimate communicate you to an ...


1

You have a couple of options here that may help: 1) Lock out very old browsers and user agents that don't make sense. 2) Load the form with ajax after JS detects mouse/tap movement and confirms against server side session token. 3) Use a better captcha such as reCaptcha. 4) Use a throttler at a decent rate such as 8-10 requests every 5 secs get blocked ...


1

I strongly advise all sites I work on not to list email addresses in any form at all. Yes, it helps reduce automated email collection (spam). Yes, it helps prevent people/bots from determining the pattern your organization uses (firstname.lastname@example.com etc.) It also might reduce info available to someone trying to do some social engineering ...


1

To state the obvious you can test if office 365 is blocking your emails by creating a 30 day trial. If your emails are being blocked then you need to address the issue why, which is how they are getting marked as spam. There are plenty of questions related to preventing email being classified as spam already on Pro Webmasters. Then you would either need to ...


1

Is there a simple way (not through command lines, ideally) to scan the website's files, or a list of the processes which are launched when one accesses the site, to troubleshoot where such malicious code snippet is located? I ran your site through webpagetest.org and the results are here: http://www.webpagetest.org/result/150721_YH_191X/1/details/ ...


1

Spammy looking visits are unlikely to be due to the code on your site. A lot of website are affected by this spam traffic, usually lasting less than 10 seconds with a bounce rate around 100%. These visits are often a traffic generation strategy to trick webmasters to look at the referral source for the visits, usually these redirect to some sort of ...


1

You are correct about betting being the issue. See Mailchimp knowledge base article on spam filters for a description of how spam filters work and what they look for. Can you remove the word betting from your daily emails and still make them understandable? That seems to be your only option.


1

Are there better solutions to this problem other than adding more human moderators? yes, automated annoyance of the spammers and their commercial objectives. First, make sure all past and future links on your site are "nofollow" see here for full details https://en.wikipedia.org/wiki/Nofollow but basically it makes your site far less attractive to ...


1

Your domain is not necessarily being accused of e-mail spam. Here are the categories from their FAQ: spam domain phish domain malware domain botnet C&C domain abused legit spam abused spammed redirector domain abused legit phish abused legit malware abused legit botnet C&C I would suggest checking your domain name and the IP address of your ...


1

I can agree that it definitely is NOT google at all. This webpage http://www.whois.com/whois/185.62.188.98 tells me its from a system out in ukraine called blazingfast. Before downright blocking the IP, you have to figure out what types of people you want to welcome to your site. It's quite possible that someone on that network simply has a hijacked ...



Only top voted, non community-wiki answers of a minimum length are eligible