-
AuthorPosts
-
January 31, 2018 at 9:12 am #905426
Hi Kriesi Support Team
I have built a quite a few websites with Enfold and they are all working fine, thanks for providing such a great framework.
I now have a website (also built with Enfold), which the customer is getting about 3-4 spam emails a day. We have captcha enabled. I can see the spam emails coming through as I am on the contact form distribution list.
The interesting thing is, this is the only client who has been receiving spam emails. All others (of which I am also on the distribution list, which is about 5 websites), do not get spam emails. There are a couple of differences on the hosting etc on this specific website and I wanted to check with you whether you have any insight what the problem could be:
=====
This particular website is hosted on a windows server and is using a plugin Easy WP SMTP to make the contact form work. The contact form did not work initially on the windows server. It worked just fine on my Linux based development server but stopped working after moving it across to the live server. I asked the hosting company to enable PHP mailer but I was told it wasn’t secure enough and that I needed to install Easy WP SMTP and configure it with an email account to make the contact form work.
All my other websites (or client websites) run on Linux with PHP mailer enabled and no one seems to get spam.
Do you have any experience with this? Or any insight?
Thanks so much.
CorinaJanuary 31, 2018 at 8:57 pm #905804Hey Corina,
I am afraid that we cant know a lot.
There can be that captcha not working properly on a Windows Server to secure the spam, but again that is not something we can be 100% sure about…Best regards,
BasilisFebruary 1, 2018 at 1:32 am #905940Hi Basilis
Thanks for getting back to me on this. Could you please explain in a bit more detail? What do you mean by
“I am afraid that we can’t know a lot. There can be that the captcha not working properly on a windows server to secure the spam, but again that is not something we can be 100% sure about …”
If I go back with this to the client he will send it to his hosting company, who will push everything back to me, telling me I should google it and that it definitely has nothing to do with his hosting (he is not a very helpful person and believes his hosting is superior and has no faults) and that it is definitely the website’s issue.
I also have the problem that the website doesn’t seem to get indexed by Google anymore and I am also guessing it could be due to the windows server or the slow loading speed due to the self-hosted movie (all suggested by the host). Do you have any experience with that? I have done all the Webmaster tools and am asking Google to index the website regularly. I have Yoast SEO installed and generally, I have never had a problem with websites I built on Enfold being indexed.
The hosting company is the IT specialist the client uses and he keeps throwing things back at me and tells me to google solutions (which I do, but I don’t seem to find answers)… so I am a bit at the wit’s end.
Thanks so much for explaining in a bit more detail and for your help.
CorinaFebruary 2, 2018 at 11:31 am #906790Hi,
We would like to help you as much as we can but we’re not familiar with server configurations. For added security, you may want to integrate Google Recaptcha.
Best regards,
IsmaelFebruary 19, 2018 at 5:09 am #914123Hi Ismael
Thanks so much. I implemented the Google Recaptcha as per your instructions. Unfortunately, the spam is still persisting.
I set the Google ReCaptcha on its strongest settings.
Question: I implemented it based on your instructions in the link you sent, and did not follow the set of instructions (on the google Recaptcha site on how to install it), is that correct, or do I have to follow and implement both?
ALSO … I just realized, the ReCaptcha code as per above instructions for the functions.php file deactivates and hides the Email Lock form field in the download section of the website.
website details below, just in case.
Thanks so much for your help.
Kindest Regards,
Corina- This reply was modified 6 years, 10 months ago by cd2s. Reason: just realised that the Google Recaptcha code as per your instructions disables the email lock form in the download section
February 19, 2018 at 8:26 pm #914504Hi,
I cant seem to be able to use the form at all, can u please remove the codes added once so we can go from blank state?
Thank you very much
Best regards,
BasilisFebruary 19, 2018 at 11:37 pm #914584Hi Basilis
Thanks so much for getting back to me.
That is weird. It works on my computer and the emails are coming through. (I am on Mac OS High Sierra, latest release Safari).
I removed the Google Captcha Code and reinstated the Enfold Captcha. Fact is though that they are receiving spam on either captcha solution.
If you need further information, please let me know. Thanks again for your help.
CorinaFebruary 20, 2018 at 7:27 am #914722Hi,
Thank you for the update. The captcha option is disabled when I checked the site. Please enable the theme’s captcha option or try to use another plugin such as the Contact Form 7. The google recaptcha can be implemented in the plugin.
// https://contactform7.com/recaptcha/
Best regards,
IsmaelFebruary 20, 2018 at 8:10 am #914730Hi Ismael
Thanks for getting back to me. The Captcha is enabled. What browser do you use to check the captcha? I use Safari & Chrome (latest installs) and on both the captcha is there. The same was with the Google ReCaptcha… it was there and working.
BUT for some reason, there is Spam coming through… about 10 messages a day?
I am just worried that I implement the Contact Form 7 and keep having the same issue.
Thanks so much & all the best,
CorinaFebruary 21, 2018 at 3:44 am #915166Hi,
Thank you for the update. The captcha option in the EN version is disabled.
Best regards,
IsmaelFebruary 22, 2018 at 11:58 pm #916418Hi Ismael
Thanks so much for looking into it. So I fixed it and the Spam keeps coming. I already tested the Google ReCaptcha and the spam kept coming (although at a slightly slower rate)…
So I am not quite sure if using the Contact Form 7 would make a difference. But I am happy to test it if you feel it’s worth a go.
If you have any other recommendations at this stage, please let me know.Thanks & all the best,
CorinaFebruary 23, 2018 at 11:23 am #916589Hi Corina,
Yes, you should try using Contact Form 7.
If you need further assistance please let us know.
Best regards,
VictoriaApril 5, 2018 at 12:49 am #937405Hello Kriesi Support Team
I followed all the instructions in this thread. So we now switched the website to contact form 7 with Google ReCaptcha and I even installed Contact Form 7 Honeypot and a Plugin called Bad Behaviour which should help with spam but the spam keeps coming.
I also noticed that now, since the last Enfold upgrade, all my other websites on Enfold start getting spam. Not huge amounts, but it started, whereas before only this website (partnerrealestate.ch) used to get spam. The websites are across a range of hosting companies.
Thanks so much.
CorinaApril 5, 2018 at 12:11 pm #937655Hi,
Could you give us an example of the spam mails’ header information? Please try to use this plugin.
// https://wordpress.org/plugins/cleantalk-spam-protect/
Best regards,
IsmaelApril 6, 2018 at 10:43 pm #938422This thread is very interesting to me because I am using an older version of Enfold on one website and (over the past year or two) get basically no contact form spam. However, I just built a new site with the very latest version of Enfold and that site – with captcha enabled on the contact form – immediately started getting at least 5-6 spam contacts per day. That may not sound like much, but the site gets very little traffic.
I have maybe a dozen other sites (built with other themes) using different versions of theme based contact forms and none of them get more than 1 spam contact every month or two. All of these are small local businesses with fairly low traffic and all are hosted on the same (dedicated) server.I am going to do the free trial of the plugin you suggested above, and if it works I I will pay the fee for it…but I would like to know if others are having the same problem and if they find that the Enfold contact form is particularly prone to spam or if this is an anomaly. Or perhaps I have something set up wrong?
I also really like the way the Enfold contact form works and looks, so my preference is to continue using if possible.I am attaching headers from a couple of them (note that I am getting copied on all of this client’s contact form inquiries).
Thank you for any suggestions you may have.April 8, 2018 at 4:07 pm #938808Hi,
@siestajoye: Would you mind if we take a look at the actual contact form? I’m not really sure about this but looks like the email is originating from your localhost or from your own system. Or I’m just reading it wrong.Received: (qmail 33293 invoked from network); 6 Apr 2018 14:40:48 -0000 Received: from localhost (HELO qs4254.pair.com) (127.0.0.1) by localhost with SMTP; 6 Apr 2018 14:40:48 -0000 Received: by qs4254.pair.com (Postfix, from userid 80766) id E408010EA493; Fri, 6 Apr 2018 10:40:48 -0400 (EDT)
Best regards,
IsmaelApril 9, 2018 at 9:03 am #939016Hi Ismael
Okay, here the header of one of the spam emails.
===========================
Kontakt Web Formular < (Email address hidden if logged out) >
Partner Real Estate – Website Anfrage (DE)
To: Partner Real Estate AG < (Email address hidden if logged out) > Cc: Felizia Kueng < (Email address hidden if logged out) >
Reply-To: (Email address hidden if logged out)
X-Exchange-Antispam-Report-Cfa-Test: BCL:0;PCL:0;RULEID:(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231221)(944501327)(52105095)(6041310)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(2016111802025)(20161123562045)(6072148)(6043046)(201708071742011);SRVR:HE1PR0201MB2410;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0201MB2410;
X-Filter-Id: PqwsvolAWURa0gwxuN3S5aQEWMcqiTxkIruNsjY2dJp21I+zqQtCj8qzYQZPi2muySAvy2rVMMCN 32bDbq6OWHaVzARy8JxXcZrhrK0x3oD9JLqWHENXEMjQQB9ITHSPnX5+t+kffz3J3AKRwix4Tql1 h9aItcvB/S2hflEFZOAYT6iKSyddvw7SeiY0kDAY2FOUII2fNnfosmc6SDA7/BbI9W21Zx+W5Q2R APKBTergQLFfEAG9NE5+gajfkNwqSwDJuVJnlcvXOTGu6bfk4Rv+zhNNvbdZ90UXCwYuJL2SM4GG M5Z6A/2I/y8TR9+cElQTckbzjz7lcdQKGrRdl3z+J5BDmhmZtycQu8C33zj4IKnfDg8lmqUK/9U2 5O0017NirEYyqwqMBGrw8ELiqPKe9hdToqv3FHuXQ/aGcedSS52k6x3RGSkQMWEpBJumfqb5R4Ve muUI6bcEARsm0LL4WoqrNa/kRPGptViJ5ezgbFXSWs45s6NOm7QJ2StMxv9ab0ClKgJ7mpEFrMvA lkpTML3orRpz2syA1SDDWkhA1O3Z58YsoXYwq9CoAYSbbIka2GEje9hWYV9gcN9J1BKEGGiy4XWU YwgPsRDmGMyvI0KHSwxdd65eai0KhaGTNoPnd8bDqREoXmxaRvi8UvUpK3dkRIB8oA1byzSg3tfY uq7rFJMtxv7HZokFc7djMkucF52W0TbCwHjTFn07K2e2+N9VrrldRma7jmYkvCHLcVnymhu6Hihz 7HecDT5aGUpJwE4/PJzYnoPsGllLMeWdCy+yf5lJ5zn7kpRC+wipxXK+CLcJKuWvgxc3U6wi43DQ kosOKgv1nikJdQIttzLf/brkhloFofJHEXKGKuCzfvvSM0N/zfJGJMeziwfAlkZHTDkFcA5xt7gX U8coVm5d7aLD7tDTLq9Q6lIWpPBV1QE5qKFL/5nb0Csdrwldl+Dhuus7JrBSIIgKDesD2UEc82Na UdIavmxMckEoQU0=
X-Clientproxiedby: AM5PR0602CA0005.eurprd06.prod.outlook.com (2603:10a6:203:a3::15) To HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11)
X-Spf-Result: asave02.hostfactory.ch: domain of partnerrealestate.ch designates 104.47.0.110 as permitted sender
X-Ms-Exchange-Crosstenant-Originalarrivaltime: 04 Apr 2018 03:06:15.4448 (UTC)
X-Originatororg: partnerrealestate.ch
X-Spamexperts-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Ms-Exchange-Transport-Crosstenantheadersstamped: HE1PR0201MB2410
X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10019020)(376002)(346002)(39830400003)(396003)(366004)(39380400002)(189003)(199004)(6636002)(89996002)(68736007)(47776003)(50466002)(74826001)(66066001)(69596002)(13146002)(486006)(4326008)(6666003)(3846002)(956004)(105586002)(43066004)(6862004)(53416004)(5660300001)(6116002)(23466002)(25786009)(74482002)(24736004)(107886003)(52116002)(386003)(81156014)(476003)(7696005)(305945005)(55016002)(7736002)(50226002)(8936002)(6306002)(22416003)(53936002)(97736004)(478600001)(23676004)(108616005)(8676002)(2870700001)(81166006)(16526019)(2860700003)(106356001)(316002)(86362001)(26005)(5566004)(2906002)(47956004);DIR:OUT;SFP:1102;SCL:1;SRVR:HE1PR0201MB2410;H:www.partnerrealestate.ch;FPR:;SPF:None;LANG:ru;PTR:InfoNoRecords;MX:1;A:1;
X-Exchange-Antispam-Report-Test: UriScan:(85827821059158);
Authentication-Results: spf=none (sender IP is ) (Email address hidden if logged out) ;
Authentication-Results: hostfactory.ch; spf=pass (Email address hidden if logged out) ; dkim=pass header.i=partnerrealestate.onmicrosoft.com
X-Originating-Ip: [185.32.125.12]
Return-Path: < (Email address hidden if logged out) >
X-Original-To: (Email address hidden if logged out)
X-Ms-Exchange-Crosstenant-Fromentityheader: Hosted
X-Report-Abuse-To: (Email address hidden if logged out)
Spamdiagnosticoutput: 1:99
X-Ms-Exchange-Crosstenant-Id: 68c38ed1-04c9-4b6d-9997-a8b1c8ac3cb1
X-Microsoft-Antispam-Prvs: <HE1PR0201MB2410DF4D21081721059E281BD0A40@HE1PR0201MB2410.eurprd02.prod.outlook.com>
Spamdiagnosticmetadata: NSPM
X-Ms-Publictraffictype: Email
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(4652020)(5600026)(4604075)(2017052603328)(7153060)(7193020);SRVR:HE1PR0201MB2410;
X-Microsoft-Antispam-Message-Info: LqE/CjVQbthXMgEkhYbR9rhQKLq4kGlgW5Af4k3oOe4N+HT7LeQSnR+SkR2dZirYAqRK4Cd41Il8b/MhFXBZtuvXABy/9BJWAullomOZLEcDbN9pU3o6pXQVVRXeh4RTHBijt1UGQ+plAeqwyYMn2wAt40rOp9/hoKCvPBwAiutw40haAJlAGNqzzY129awr
< (Email address hidden if logged out) >
Mime-Version: 1.0
X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)
X-Ms-Office365-Filtering-Correlation-Id: 44a4082c-cbba-4d0f-54fe-08d599d90797
Content-Transfer-Encoding: 8bit
Received: from asave02.hostfactory.ch (asave02.hostfactory.ch [217.150.252.154]) by server39.hostfactory.ch (Postfix) with ESMTPS id D185847D7D8C for < (Email address hidden if logged out) >; Wed, 4 Apr 2018 05:06:26 +0200 (CEST)
Received: from mail-he1eur01on0110.outbound.protection.outlook.com ([104.47.0.110] helo=EUR01-HE1-obe.outbound.protection.outlook.com) by asave02.hostfactory.ch with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.89) (envelope-from < (Email address hidden if logged out) >) id 1f3Ykj-0002XR-8z for (Email address hidden if logged out) ; Wed, 04 Apr 2018 05:06:26 +0200
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.10; Wed, 4 Apr 2018 03:06:15 +0000
Content-Type: text/plain; charset=UTF-8
X-Ms-Traffictypediagnostic: HE1PR0201MB2410:
Delivered-To: (Email address hidden if logged out)
Received-Spf: None (protection.outlook.com: partnerrealestate.ch does not designate permitted sender hosts)
Received-Spf: pass (asave02.hostfactory.ch: domain of partnerrealestate.ch designates 104.47.0.110 as permitted sender) client-ip=104.47.0.110; (Email address hidden if logged out) ; helo=EUR01-HE1-obe.outbound.protection.outlook.com;
X-Ms-Exchange-Crosstenant-Network-Message-Id: 44a4082c-cbba-4d0f-54fe-08d599d90797
X-Microsoft-Exchange-Diagnostics: 1;HE1PR0201MB2410;3:qdxptTVtO3WHwpNS8oWmJ2w3/nPkaooTvhmyYVthIyQ5w4tKDSkm1b6Xrh6+Lgqn3YIF0yj0AhPoJg6DgAN6Myfm4k+sT/jlTCP6DkqtmSCofbw6V9d0j6W8sfHBygXmXUKNclaTxKB6hWYRAlOjUltpuG8N+SIyR35y+7VN8T5POxRdkaT7EUi1Wmv9LVU5xRKV18lLkEgXD2RD3Gy4x3EM+5O4fMkoU2q8V3vVZurqzX650HkQxdJmVAvnIhy0;25:jf89WJkh10w3DanTATy67BaaNJnPRitJ0NJ5vGiJs/LC5UGrF3jix7tVKEnV1E5xUpUeXh3wMlrHx6yVmZ8JW+IyYZRPGnBY2bGqgTFNijwf9hzVFogzMFevWp+AGBJOyF0yknFnl2eYSigYZ2bJhxHeep1pWbT67D2YQ532h2e/5MjLls7MLJCPO6WMaRIqAoI+KqrZJN1an6+732ax3Ld2pDFoW1rK3s5NXkGj4WJSasIv+z7zF2+m2tytUBzVPkkNewIQfsMnHYFyDpa5jrvpO66oioDKCQmFEmqIH7KE7nplpuZvunWUDXyVwhn3k9lIfkumv2dnoTJGCqdFtw==;31:IVaca2hbtFyd/G6fPZ0xwnIXYNS5PMOlPgKRyIuYbMC1IIM1wjbv9Xyx0lB8rfDJz+QcK+bfo/jf4WTV6ldaVU7vJIcUdpF+tAE2p4hTtkhq47M1HoQPLWthB8i55miwyhnA5hU/MmtQaef2Abmxj3Qt5bxAc/Q2bUoOpLK7gIGb0+5OAc/K9Y4Jj3jWQAuUCDv+s53RHADk/EJyMEfbjJDztLITBUrYYXvEnbLpsxc=
X-Microsoft-Exchange-Diagnostics: 1;HE1PR0201MB2410;4:M1omUE/Z7cHW7T+BN+czGAkaiDNSheXXeuLce6eXRXwcGlfzdYY3l1C2Vv6bwqu6Sk/F0YbPXOLHxYxxxuzSGYyrTlcfCOk7B+IoOH41mzpRheXDDEOvaq9NnshA/nN5GX7V9G9GkNbKnp1Y5NPS/pTg6njpBIhsJv+nsRtkGyM6jsdzXqnLoI0zGnaHHfKvM/1wxXcW/edInI5pO15rXtVaNWmGc5KkNQNnPUkOAWUSjnZZjxTkOCvRap9o+LsQtUU0H7Jqn+cAOYsmeqSUNF8Sjo1aV7981SFYSf7HuYMjwXKPRdir0JqhF5KtWbil
X-Microsoft-Exchange-Diagnostics: 1;HE1PR0201MB2410;23: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
X-Microsoft-Exchange-Diagnostics: 1;HE1PR0201MB2410;6:0XV8PCxnGV/RYp0SsCrc9NYxx0kxNgvL40PHrjw5ieOI0Cl1231zMeCaVKKlC1FeHAYsWSNJPRJWDD3dEmEBFx4rIck8Vsf53kUCW6BL6xLZrIR/WZVk0WeMZL9EduOIataGiayUez+C9O+zgecLHF7rRKLO2bn0Wx6DglUhAeVruXsYLBAUsXeAV/IuArybrhasJoe9zuTba2Wk7+4CiU+QtkR95/wJyNH+7H85jYYLlW9UJePx0V+cdqZdJF67axJXCR5HSYRT2NjGwLxW3spLVd9Rtdoj9Z6CdcQzVSYhGbn8k6asogF0QWAWx1rrnw0MoMW+vMHJb3Q1ZksvMYXeR5pF8MNk75J4ljx+vfzk1ZLKf22LdAJ5euUsqEeMelZdacxJXANjaYcYucuGlorOVct7BJ9q/DNbMncb/EE+/8h7y2Q/ulb9gTrJ1K0KhwQtmg6ksgyx9DhAvr/SvA==;5:wz7ODddjrzChDYm2uX3ZxJsNfM1yIX50uNOhXCoaFIPL/6kniM069+THiryykzZd3S+YzIWRbXhK8aSOVSmIRwFHd63Ivd7gL78kuOIjEZWO20ET7V0UIPD9zm6FpTnhLSTPliDlYNsONcw1kKpWjY8lKYw6a+2LwRCSiKXR/EQ=;24:7x7ckNWhS3ddz0d7+BkVLGpiVi3Yjtbp4UcuxAaGi8P4EMH76MpMaHT67A3zjWHTVl/xx+ftZRxPFh4TpaUFhKEZyf+2oolHlNosDmbJh3w=
X-Microsoft-Exchange-Diagnostics: 1;HE1PR0201MB2410;7:gi06UKnxVXkNKB5P3s4xomZS2FNnk+fiD6JUwxFxwaEve3Bkyxct9mu3totc6fyOUkdT9xQspPFPZvL25OLAf93WTCSxqhShqqB4qV6jYIHTeHgaHVAXpV+8Z4daPV3PJdqWZC2/vd8OaRS7Yt2upFf1OzfrphAiuq/w0ft9KeJZ+S4aESLyuGu5kQcV7IO4CfDQOa39NYdKNcu+eKjxqlvFJ+XzqiEQgLXMxSxUSPTgy3vT2T8MThjYbP+2M4Pa
X-Spamexperts-Class: ham
X-Forefront-Prvs: 0632519F33
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=partnerrealestate.onmicrosoft.com; s=selector1-partnerrealestate-ch; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=PVjky4SGzDYn3+Ozbs6sYXn3RzhgO87IsZn3/yMwsNk=; b=CtoLVU8x4jy1o2x38SbVAGbhF2Qfk6rwiXf+hr1H/42fseWkNQi4gh45VV9q0cvv9Kd73PKu83AWVozPm9gZbgM+kD6LUUOYXLyKFvdAh4rfbDM43+0yZQcxo+z20ZxShQOgr5gMTSRJNxGB+IW8pO7XMykcXkdxTlAAVj4e4vM=========================
I actually now (before your reply) purchased WP Spamshield and installed it and so far (fingers crossed) it is much better. But will also look at your other solution for some of the other enfold installs that seem to get spam now.Thanks heaps.
CorinaApril 9, 2018 at 3:36 pm #939275Hi,
Thank you for the update. That particular email was sent from this IP Address (15.20.631.10).
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.10; Wed, 4 Apr 2018 03:06:15 +0000
Is it the same for every spam mail?
Best regards,
IsmaelApril 10, 2018 at 1:23 am #939491Hi Ismael
I tested a few. Here are some others. Some are the same over a few days and then it changes….
Let me know if you need any other information, I can send you more, these are just a few.Thanks so much.
Corina——-
Received: from http://www.partnerrealestate.ch (185.32.125.12) by AM5PR0201MB2401.eurprd02.prod.outlook.com (2603:10a6:203:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.10; Sat, 24 Mar 2018 02:30:36 +0000
—–
Received: from http://www.partnerrealestate.ch (185.32.125.12) by AM5PR0201MB2401.eurprd02.prod.outlook.com (2603:10a6:203:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.10; Sat, 24 Mar 2018 02:30:36 +0000
——
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2412.eurprd02.prod.outlook.com (2603:10a6:3:81::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Tue, 20 Mar 2018 05:55:07 +0000
Content-Type: text/html; charset=utf-8——-
Received: from http://www.partnerrealestate.ch (185.32.125.12) by DB6PR0201MB2408.eurprd02.prod.outlook.com (2603:10a6:4:34::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 18:15:05 +0000
——
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2409.eurprd02.prod.outlook.com (2603:10a6:3:81::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:57:33 +0000
——-
Received: from http://www.partnerrealestate.ch (185.32.125.12) by DB6PR0201MB2406.eurprd02.prod.outlook.com (2603:10a6:4:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Sun, 18 Mar 2018 11:21:49 +0000
—–
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Fri, 16 Mar 2018 12:51:14 +0000
—-
Received: from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2409.eurprd02.prod.outlook.com (2603:10a6:3:81::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Tue, 13 Mar 2018 15:26:02 +0000
April 10, 2018 at 6:26 pm #939971Hi Ismael,
I should have mentioned that QSXXXX you see in header of spam mail is actually my dedicated server. My email is delivered from that server as well as my client’s contact forms. I am copied on all of those forms. Another 8 spam (mostly .ru) since I posted before. I am attaching the code from the form below along with server information. If there is anything else that I can provide, please let me know.
Thanks for looking into this,
Joye- This reply was modified 6 years, 8 months ago by siestajoye. Reason: additional info from header of latest spam
April 11, 2018 at 8:56 am #940289Hi,
Thank you for the info.
Is the WP Spamshield plugin helping? We can integrate Google’s reCAPTCHA in the theme’s contact form for added security. Add the following code in the functions.php file and replace “SITE PUBLIC KEY HERE” and “SITE SECRET KEY HERE” with your own reCAPTCHAV2 credentials. (https://www.google.com/recaptcha/admin)
// https://pastebin.com/grRiHvHr
Best regards,
IsmaelApril 12, 2018 at 10:14 am #940842Hi Ismael
It was helping but then I realised that it interfered with the Download field from Download Monitor and people could no longer download files, so I had to disable it again.
We are using Google ReCaptcha already. I integrated it via the Contact Form 7
I’ll keep you posted if the Spam comes back, as I only disabled the Spam Shield plugin yesterday.
Thanks for your help & All the best,
CorinaApril 13, 2018 at 5:48 am #941254Hi Corina,
Thanks for the feedback. We’ll keep the thread open in case you should need any further help on the topic.
Best regards,
RikardMay 2, 2018 at 12:03 pm #950007Hi Ismael
i used the code you suggest and work fine only on the home page. I have a contact page and doesn’t works! Could you please what i do wrong?May 2, 2018 at 9:14 pm #950292Hi Ismael,
I am trying to use your code also. It is working on the contact form but the Submit button does not go back to opacity: 1 and is not active. I am getting an error in the console:
“TypeError: undefined is not an object (evaluating ‘$.ajax’)
onVerifyCallback — contact-us:465
onSuccessfullCallback — contact-us:459”May 4, 2018 at 3:51 am #951212Hi,
Thank you for using Enfold.
Did you compressed the scripts and stylesheets from the Performance panel? Please try to disable those options first then try again. This is an error from the site.
(index):269 Uncaught ReferenceError: jQuery is not defined at (index):269
Best regards,
IsmaelMay 6, 2018 at 4:42 pm #952339I updated the theme to 4.3.1 and insert the code you suggest on the function.php, but i can see captcha only on the home page.
May 7, 2018 at 11:14 am #952607Hi Kriesi Support Team
After installing WP Spamshield and finding out it interfered with the plugin Download Monitor (Downloads stop working and give a javascript error), we had to disable WP Spamshield again.
I also have the following plugins installed: Contact Form 7 with Recaptcha, Honeypot and a Plugin called Bad Behaviour.
We had some quiet for a couple of weeks but the last few days the website is getting hammered again with spam. I haven’t updated the theme yet, as I the hosting company has the contract to run updates on the website. So before I contact him (the host), here’s the question.
The new version of Enfold, should it help with spam issues?
Thanks so much & Kindest Regards,
CorinaMay 8, 2018 at 6:09 am #953109Hi,
The new version of Enfold, should it help with spam issues?
There’s no security upgrades on the latest version so it won’t help but you need to upgrade the theme nevertheless.
Best regards,
IsmaelMay 8, 2018 at 6:18 am #953119Hi Ismael
Thanks so much for getting back to me. I just logged in and upgraded to the latest version of Enfold and also updated all plugins and the issue we had with Download Monitor and Spamshield seems to have solved itself.
I now activated Spamshield. Fingers crossed this will help with the issue.
Kindest Regards,
Corina -
AuthorPosts
- The topic ‘Spam Emails through Contact Form’ is closed to new replies.