Viewing 30 posts - 1 through 30 (of 37 total)
1 2
  • Author
    Posts
  • January 31, 2018 at 9:12 am #905426
    cd2s

    Hi Kriesi Support Team

    I have built a quite a few websites with Enfold and they are all working fine, thanks for providing such a great framework.

    I now have a website (also built with Enfold), which the customer is getting about 3-4 spam emails a day. We have captcha enabled. I can see the spam emails coming through as I am on the contact form distribution list.

    The interesting thing is, this is the only client who has been receiving spam emails. All others (of which I am also on the distribution list, which is about 5 websites), do not get spam emails. There are a couple of differences on the hosting etc on this specific website and I wanted to check with you whether you have any insight what the problem could be:

    =====

    This particular website is hosted on a windows server and is using a plugin Easy WP SMTP to make the contact form work. The contact form did not work initially on the windows server. It worked just fine on my Linux based development server but stopped working after moving it across to the live server. I asked the hosting company to enable PHP mailer but I was told it wasn’t secure enough and that I needed to install Easy WP SMTP and configure it with an email account to make the contact form work.

    All my other websites (or client websites) run on Linux with PHP mailer enabled and no one seems to get spam.

    Do you have any experience with this? Or any insight?

    Thanks so much.
    Corina

    January 31, 2018 at 8:57 pm #905804
    Basilis

    Hey Corina,

    I am afraid that we cant know a lot.
    There can be that captcha not working properly on a Windows Server to secure the spam, but again that is not something we can be 100% sure about…

    Best regards,
    Basilis

    February 1, 2018 at 1:32 am #905940
    cd2s

    Hi Basilis

    Thanks for getting back to me on this. Could you please explain in a bit more detail? What do you mean by

    “I am afraid that we can’t know a lot. There can be that the captcha not working properly on a windows server to secure the spam, but again that is not something we can be 100% sure about …”

    If I go back with this to the client he will send it to his hosting company, who will push everything back to me, telling me I should google it and that it definitely has nothing to do with his hosting (he is not a very helpful person and believes his hosting is superior and has no faults) and that it is definitely the website’s issue.

    I also have the problem that the website doesn’t seem to get indexed by Google anymore and I am also guessing it could be due to the windows server or the slow loading speed due to the self-hosted movie (all suggested by the host). Do you have any experience with that? I have done all the Webmaster tools and am asking Google to index the website regularly. I have Yoast SEO installed and generally, I have never had a problem with websites I built on Enfold being indexed.

    The hosting company is the IT specialist the client uses and he keeps throwing things back at me and tells me to google solutions (which I do, but I don’t seem to find answers)… so I am a bit at the wit’s end.

    Thanks so much for explaining in a bit more detail and for your help.
    Corina

    February 2, 2018 at 11:31 am #906790
    Ismael

    Hi,

    We would like to help you as much as we can but we’re not familiar with server configurations. For added security, you may want to integrate Google Recaptcha.

    // https://kriesi.at/support/topic/starting-to-receive-spam-enquiries-from-contact-form-on-website/#post-817676

    Best regards,
    Ismael

    February 19, 2018 at 5:09 am #914123
    cd2s

    Hi Ismael

    Thanks so much. I implemented the Google Recaptcha as per your instructions. Unfortunately, the spam is still persisting.

    I set the Google ReCaptcha on its strongest settings.

    Question: I implemented it based on your instructions in the link you sent, and did not follow the set of instructions (on the google Recaptcha site on how to install it), is that correct, or do I have to follow and implement both?

    ALSO … I just realized, the ReCaptcha code as per above instructions for the functions.php file deactivates and hides the Email Lock form field in the download section of the website.

    website details below, just in case.

    Thanks so much for your help.
    Kindest Regards,
    Corina

    • This reply was modified 6 years, 9 months ago by cd2s. Reason: just realised that the Google Recaptcha code as per your instructions disables the email lock form in the download section
    February 19, 2018 at 8:26 pm #914504
    Basilis

    Hi,

    I cant seem to be able to use the form at all, can u please remove the codes added once so we can go from blank state?

    Thank you very much

    Best regards,
    Basilis

    February 19, 2018 at 11:37 pm #914584
    cd2s

    Hi Basilis

    Thanks so much for getting back to me.

    That is weird. It works on my computer and the emails are coming through. (I am on Mac OS High Sierra, latest release Safari).

    I removed the Google Captcha Code and reinstated the Enfold Captcha. Fact is though that they are receiving spam on either captcha solution.

    If you need further information, please let me know. Thanks again for your help.
    Corina

    February 20, 2018 at 7:27 am #914722
    Ismael

    Hi,

    Thank you for the update. The captcha option is disabled when I checked the site. Please enable the theme’s captcha option or try to use another plugin such as the Contact Form 7. The google recaptcha can be implemented in the plugin.

    // https://contactform7.com/recaptcha/

    Best regards,
    Ismael

    February 20, 2018 at 8:10 am #914730
    cd2s

    Hi Ismael

    Thanks for getting back to me. The Captcha is enabled. What browser do you use to check the captcha? I use Safari & Chrome (latest installs) and on both the captcha is there. The same was with the Google ReCaptcha… it was there and working.

    BUT for some reason, there is Spam coming through… about 10 messages a day?

    I am just worried that I implement the Contact Form 7 and keep having the same issue.

    Thanks so much & all the best,
    Corina

    February 21, 2018 at 3:44 am #915166
    Ismael

    Hi,

    Thank you for the update. The captcha option in the EN version is disabled.

    // https://imgur.com/a/9k0VP

    Best regards,
    Ismael

    February 22, 2018 at 11:58 pm #916418
    cd2s

    Hi Ismael

    Thanks so much for looking into it. So I fixed it and the Spam keeps coming. I already tested the Google ReCaptcha and the spam kept coming (although at a slightly slower rate)…

    So I am not quite sure if using the Contact Form 7 would make a difference. But I am happy to test it if you feel it’s worth a go.
    If you have any other recommendations at this stage, please let me know.

    Thanks & all the best,
    Corina

    February 23, 2018 at 11:23 am #916589
    Victoria

    Hi Corina,

    Yes, you should try using Contact Form 7.

    If you need further assistance please let us know.
    Best regards,
    Victoria

    April 5, 2018 at 12:49 am #937405
    cd2s

    Hello Kriesi Support Team

    I followed all the instructions in this thread. So we now switched the website to contact form 7 with Google ReCaptcha and I even installed Contact Form 7 Honeypot and a Plugin called Bad Behaviour which should help with spam but the spam keeps coming.

    I also noticed that now, since the last Enfold upgrade, all my other websites on Enfold start getting spam. Not huge amounts, but it started, whereas before only this website (partnerrealestate.ch) used to get spam. The websites are across a range of hosting companies.

    Thanks so much.
    Corina

    April 5, 2018 at 12:11 pm #937655
    Ismael

    Hi,

    Could you give us an example of the spam mails’ header information? Please try to use this plugin.

    // https://wordpress.org/plugins/cleantalk-spam-protect/

    Best regards,
    Ismael

    April 6, 2018 at 10:43 pm #938422
    siestajoye

    This thread is very interesting to me because I am using an older version of Enfold on one website and (over the past year or two) get basically no contact form spam. However, I just built a new site with the very latest version of Enfold and that site – with captcha enabled on the contact form – immediately started getting at least 5-6 spam contacts per day. That may not sound like much, but the site gets very little traffic.
    I have maybe a dozen other sites (built with other themes) using different versions of theme based contact forms and none of them get more than 1 spam contact every month or two. All of these are small local businesses with fairly low traffic and all are hosted on the same (dedicated) server.

    I am going to do the free trial of the plugin you suggested above, and if it works I I will pay the fee for it…but I would like to know if others are having the same problem and if they find that the Enfold contact form is particularly prone to spam or if this is an anomaly. Or perhaps I have something set up wrong?
    I also really like the way the Enfold contact form works and looks, so my preference is to continue using if possible.

    I am attaching headers from a couple of them (note that I am getting copied on all of this client’s contact form inquiries).
    Thank you for any suggestions you may have.

    April 8, 2018 at 4:07 pm #938808
    Ismael

    Hi,


    @siestajoye    : Would you mind if we take a look at the actual contact form? I’m not really sure about this but looks like the email is originating from your localhost or from your own system. Or I’m just reading it wrong.

    
Received: (qmail 33293 invoked from network); 6 Apr 2018 14:40:48 -0000
Received: from localhost (HELO qs4254.pair.com) (127.0.0.1)
by localhost with SMTP; 6 Apr 2018 14:40:48 -0000
Received: by qs4254.pair.com (Postfix, from userid 80766)
id E408010EA493; Fri, 6 Apr 2018 10:40:48 -0400 (EDT)

    Best regards,
    Ismael

    April 9, 2018 at 9:03 am #939016
    cd2s

    Hi Ismael

    Okay, here the header of one of the spam emails.

    ===========================

    Kontakt Web Formular < (Email address hidden if logged out) >
    Partner Real Estate – Website Anfrage (DE)
    To: Partner Real Estate AG < (Email address hidden if logged out) > Cc: Felizia Kueng < (Email address hidden if logged out) >
    Reply-To: (Email address hidden if logged out)
    X-Exchange-Antispam-Report-Cfa-Test: ⁨BCL:0;PCL:0;RULEID:(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231221)(944501327)(52105095)(6041310)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(2016111802025)(20161123562045)(6072148)(6043046)(201708071742011);SRVR:HE1PR0201MB2410;BCL:0;PCL:0;RULEID:;SRVR:HE1PR0201MB2410;⁩
    X-Filter-Id: ⁨PqwsvolAWURa0gwxuN3S5aQEWMcqiTxkIruNsjY2dJp21I+zqQtCj8qzYQZPi2muySAvy2rVMMCN 32bDbq6OWHaVzARy8JxXcZrhrK0x3oD9JLqWHENXEMjQQB9ITHSPnX5+t+kffz3J3AKRwix4Tql1 h9aItcvB/S2hflEFZOAYT6iKSyddvw7SeiY0kDAY2FOUII2fNnfosmc6SDA7/BbI9W21Zx+W5Q2R APKBTergQLFfEAG9NE5+gajfkNwqSwDJuVJnlcvXOTGu6bfk4Rv+zhNNvbdZ90UXCwYuJL2SM4GG M5Z6A/2I/y8TR9+cElQTckbzjz7lcdQKGrRdl3z+J5BDmhmZtycQu8C33zj4IKnfDg8lmqUK/9U2 5O0017NirEYyqwqMBGrw8ELiqPKe9hdToqv3FHuXQ/aGcedSS52k6x3RGSkQMWEpBJumfqb5R4Ve muUI6bcEARsm0LL4WoqrNa/kRPGptViJ5ezgbFXSWs45s6NOm7QJ2StMxv9ab0ClKgJ7mpEFrMvA lkpTML3orRpz2syA1SDDWkhA1O3Z58YsoXYwq9CoAYSbbIka2GEje9hWYV9gcN9J1BKEGGiy4XWU YwgPsRDmGMyvI0KHSwxdd65eai0KhaGTNoPnd8bDqREoXmxaRvi8UvUpK3dkRIB8oA1byzSg3tfY uq7rFJMtxv7HZokFc7djMkucF52W0TbCwHjTFn07K2e2+N9VrrldRma7jmYkvCHLcVnymhu6Hihz 7HecDT5aGUpJwE4/PJzYnoPsGllLMeWdCy+yf5lJ5zn7kpRC+wipxXK+CLcJKuWvgxc3U6wi43DQ kosOKgv1nikJdQIttzLf/brkhloFofJHEXKGKuCzfvvSM0N/zfJGJMeziwfAlkZHTDkFcA5xt7gX U8coVm5d7aLD7tDTLq9Q6lIWpPBV1QE5qKFL/5nb0Csdrwldl+Dhuus7JrBSIIgKDesD2UEc82Na UdIavmxMckEoQU0=⁩
    X-Clientproxiedby: ⁨AM5PR0602CA0005.eurprd06.prod.outlook.com (2603:10a6:203:a3::15) To HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11)⁩
    X-Spf-Result: ⁨asave02.hostfactory.ch: domain of partnerrealestate.ch designates 104.47.0.110 as permitted sender⁩
    X-Ms-Exchange-Crosstenant-Originalarrivaltime: ⁨04 Apr 2018 03:06:15.4448 (UTC)⁩
    X-Originatororg: ⁨partnerrealestate.ch⁩
    X-Spamexperts-Evidence: ⁨Combined (0.15)⁩
    X-Recommended-Action: ⁨accept⁩
    X-Ms-Exchange-Transport-Crosstenantheadersstamped: ⁨HE1PR0201MB2410⁩
    X-Forefront-Antispam-Report: ⁨SFV:NSPM;SFS:(10019020)(376002)(346002)(39830400003)(396003)(366004)(39380400002)(189003)(199004)(6636002)(89996002)(68736007)(47776003)(50466002)(74826001)(66066001)(69596002)(13146002)(486006)(4326008)(6666003)(3846002)(956004)(105586002)(43066004)(6862004)(53416004)(5660300001)(6116002)(23466002)(25786009)(74482002)(24736004)(107886003)(52116002)(386003)(81156014)(476003)(7696005)(305945005)(55016002)(7736002)(50226002)(8936002)(6306002)(22416003)(53936002)(97736004)(478600001)(23676004)(108616005)(8676002)(2870700001)(81166006)(16526019)(2860700003)(106356001)(316002)(86362001)(26005)(5566004)(2906002)(47956004);DIR:OUT;SFP:1102;SCL:1;SRVR:HE1PR0201MB2410;H:www.partnerrealestate.ch;FPR:;SPF:None;LANG:ru;PTR:InfoNoRecords;MX:1;A:1;⁩
    X-Exchange-Antispam-Report-Test: ⁨UriScan:(85827821059158);⁩
    Authentication-Results: ⁨spf=none (sender IP is ) (Email address hidden if logged out) ; ⁩
    Authentication-Results: ⁨hostfactory.ch; spf=pass (Email address hidden if logged out) ; dkim=pass header.i=partnerrealestate.onmicrosoft.com⁩
    X-Originating-Ip: ⁨[185.32.125.12]⁩
    Return-Path: ⁨< (Email address hidden if logged out) >⁩
    X-Original-To: ⁨ (Email address hidden if logged out) ⁩
    X-Ms-Exchange-Crosstenant-Fromentityheader: ⁨Hosted⁩
    X-Report-Abuse-To: ⁨ (Email address hidden if logged out) ⁩
    Spamdiagnosticoutput: ⁨1:99⁩
    X-Ms-Exchange-Crosstenant-Id: ⁨68c38ed1-04c9-4b6d-9997-a8b1c8ac3cb1⁩
    X-Microsoft-Antispam-Prvs: ⁨<HE1PR0201MB2410DF4D21081721059E281BD0A40@HE1PR0201MB2410.eurprd02.prod.outlook.com>⁩
    Spamdiagnosticmetadata: ⁨NSPM⁩
    X-Ms-Publictraffictype: ⁨Email⁩
    X-Microsoft-Antispam: ⁨UriScan:;BCL:0;PCL:0;RULEID:(7020095)(4652020)(5600026)(4604075)(2017052603328)(7153060)(7193020);SRVR:HE1PR0201MB2410;⁩
    X-Microsoft-Antispam-Message-Info: ⁨LqE/CjVQbthXMgEkhYbR9rhQKLq4kGlgW5Af4k3oOe4N+HT7LeQSnR+SkR2dZirYAqRK4Cd41Il8b/MhFXBZtuvXABy/9BJWAullomOZLEcDbN9pU3o6pXQVVRXeh4RTHBijt1UGQ+plAeqwyYMn2wAt40rOp9/hoKCvPBwAiutw40haAJlAGNqzzY129awr⁩
    ⁨< (Email address hidden if logged out) >⁩
    Mime-Version: ⁨1.0⁩
    X-Mailer: ⁨PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)⁩
    X-Ms-Office365-Filtering-Correlation-Id: ⁨44a4082c-cbba-4d0f-54fe-08d599d90797⁩
    Content-Transfer-Encoding: ⁨8bit⁩
    Received: ⁨from asave02.hostfactory.ch (asave02.hostfactory.ch [217.150.252.154]) by server39.hostfactory.ch (Postfix) with ESMTPS id D185847D7D8C for < (Email address hidden if logged out) >; Wed, 4 Apr 2018 05:06:26 +0200 (CEST)⁩
    Received: ⁨from mail-he1eur01on0110.outbound.protection.outlook.com ([104.47.0.110] helo=EUR01-HE1-obe.outbound.protection.outlook.com) by asave02.hostfactory.ch with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.89) (envelope-from < (Email address hidden if logged out) >) id 1f3Ykj-0002XR-8z for (Email address hidden if logged out) ; Wed, 04 Apr 2018 05:06:26 +0200⁩
    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.10; Wed, 4 Apr 2018 03:06:15 +0000⁩
    Content-Type: ⁨text/plain; charset=UTF-8⁩
    X-Ms-Traffictypediagnostic: ⁨HE1PR0201MB2410:⁩
    Delivered-To: ⁨ (Email address hidden if logged out) ⁩
    Received-Spf: ⁨None (protection.outlook.com: partnerrealestate.ch does not designate permitted sender hosts)⁩
    Received-Spf: ⁨pass (asave02.hostfactory.ch: domain of partnerrealestate.ch designates 104.47.0.110 as permitted sender) client-ip=104.47.0.110; (Email address hidden if logged out) ; helo=EUR01-HE1-obe.outbound.protection.outlook.com;⁩
    X-Ms-Exchange-Crosstenant-Network-Message-Id: ⁨44a4082c-cbba-4d0f-54fe-08d599d90797⁩
    X-Microsoft-Exchange-Diagnostics: ⁨1;HE1PR0201MB2410;3:qdxptTVtO3WHwpNS8oWmJ2w3/nPkaooTvhmyYVthIyQ5w4tKDSkm1b6Xrh6+Lgqn3YIF0yj0AhPoJg6DgAN6Myfm4k+sT/jlTCP6DkqtmSCofbw6V9d0j6W8sfHBygXmXUKNclaTxKB6hWYRAlOjUltpuG8N+SIyR35y+7VN8T5POxRdkaT7EUi1Wmv9LVU5xRKV18lLkEgXD2RD3Gy4x3EM+5O4fMkoU2q8V3vVZurqzX650HkQxdJmVAvnIhy0;25:jf89WJkh10w3DanTATy67BaaNJnPRitJ0NJ5vGiJs/LC5UGrF3jix7tVKEnV1E5xUpUeXh3wMlrHx6yVmZ8JW+IyYZRPGnBY2bGqgTFNijwf9hzVFogzMFevWp+AGBJOyF0yknFnl2eYSigYZ2bJhxHeep1pWbT67D2YQ532h2e/5MjLls7MLJCPO6WMaRIqAoI+KqrZJN1an6+732ax3Ld2pDFoW1rK3s5NXkGj4WJSasIv+z7zF2+m2tytUBzVPkkNewIQfsMnHYFyDpa5jrvpO66oioDKCQmFEmqIH7KE7nplpuZvunWUDXyVwhn3k9lIfkumv2dnoTJGCqdFtw==;31:IVaca2hbtFyd/G6fPZ0xwnIXYNS5PMOlPgKRyIuYbMC1IIM1wjbv9Xyx0lB8rfDJz+QcK+bfo/jf4WTV6ldaVU7vJIcUdpF+tAE2p4hTtkhq47M1HoQPLWthB8i55miwyhnA5hU/MmtQaef2Abmxj3Qt5bxAc/Q2bUoOpLK7gIGb0+5OAc/K9Y4Jj3jWQAuUCDv+s53RHADk/EJyMEfbjJDztLITBUrYYXvEnbLpsxc=⁩
    X-Microsoft-Exchange-Diagnostics: ⁨1;HE1PR0201MB2410;4:M1omUE/Z7cHW7T+BN+czGAkaiDNSheXXeuLce6eXRXwcGlfzdYY3l1C2Vv6bwqu6Sk/F0YbPXOLHxYxxxuzSGYyrTlcfCOk7B+IoOH41mzpRheXDDEOvaq9NnshA/nN5GX7V9G9GkNbKnp1Y5NPS/pTg6njpBIhsJv+nsRtkGyM6jsdzXqnLoI0zGnaHHfKvM/1wxXcW/edInI5pO15rXtVaNWmGc5KkNQNnPUkOAWUSjnZZjxTkOCvRap9o+LsQtUU0H7Jqn+cAOYsmeqSUNF8Sjo1aV7981SFYSf7HuYMjwXKPRdir0JqhF5KtWbil⁩
    X-Microsoft-Exchange-Diagnostics: ⁨1;HE1PR0201MB2410;23:cb2pNuHgN2Aj66RUAYhQYBRUQ18c6ih0Ah/QFF08+njR/DH4o4YQE8ANn2rMITSxT4uqDtcyzFwYjsCqtij3ADxpB+NxX/82MuFesb2wPNveRwZenHjtq06dXWZUlXraornXX2AOWZBqsCzPWb+pvfR0n/QPe1puobOed9pC4/F+9OQwQxUVuYpWNwpWZZ4ACflM5tvMHnX2u26Hvy95f8AQlbFJKnJYBGQoWKIyePWb+tLjBxRX20t2e9z5tode/NMCwibZnTAzESeMRs6LAxF0IYDCovcaEoOC918OKiTsDrBW6TXYTy767erjSUHgGYqvUGg507INniehyvBVjawiwUVwIxPd44uXtS5+K+W0P47pgsdW+r4hyuq75j7DcpTSf3udpoLBWhMnf1Blwnvh2/JvF17F39gcrfwi7D0xUgoJpjEkzjmboyZ+i0/SypM8rt414mFRALGFTGyypJ/c7JsPJYWfleqsbIyUssi5hV+v0CyCVSY/38IIZMjJjy4Y335d/ZYEjHsfSqU9jopYl1fK4XRWN6wMepH2tZkrj2xHMyZ0am10JHZzYly7maSWTrs9mj1oz5Xf+kUHhOb/aHVWd0QvO1grtTkokkNwmWZqCDxiJKxL7lCytaIs4833iCtfpBQ+d0jIouxISoyzPboR1N+DXbMc8AwX00eHVE4ZaEQiZ2AzCvblO9k9KBwnoRDjNr8u5voWIbezDHtDq2+rFAi3IcTGiQL6Ardx4x0Bh50s7jB+MKpuOWc8Q16heVcUi1rzD85GmtNcsEgaScovQRG5lvWmah5ysWnp9+vaJ7f3dZM8KucenQ+HWYbrmskymwObH0tZokrXLQoaDvOnAkohydNZjrdGF75GAWLIZ6WxnpTt8SFnd3VwQkjeep0b0BNtUBOsipTcK2Rx9rSMl7/smImzxv5poWvrp9mhkNPXF43mtwfFLQiO7P4uWSshmziKanCyrUDW2H0YJdc2XgFWT3mTaWlXCL7wIYDrKgtcUNtx9BkpG76eqi2fyeRpaUORbrH7L/uzSsPstdPelx7mMifwiT6b1hKFl9iY93hJX21e1WUxD60oAsrcRxtYhjk4RI1gMKDraoCS3cBmLQxenDCcpuDLmJ5MQXahV+Xibl1qV92B98zCiEHUDEWOGLo75S3MwggH2jX6/0eH9n5ZM+Yd7YcZ9EnGNEgnOR+Nf+lRPH+oHCSZZq5CqDtsVrf/8h9tdhRZTSjkCzxdDKWgXY6miOTklJ0lerEx2uIsMVg9a0ODIbtEaajIgitE6aYVUIKriB5gNa2IzxiErB9swsCZXmEN/UnM8CTElTidmyh5AvC6Qo13C82W8AvuuiYPhEHP1xeyTiriEHs5KRiXhjRYdpU2FTTVhn/wy2u83bgIJpduxNns⁩
    X-Microsoft-Exchange-Diagnostics: ⁨1;HE1PR0201MB2410;6:0XV8PCxnGV/RYp0SsCrc9NYxx0kxNgvL40PHrjw5ieOI0Cl1231zMeCaVKKlC1FeHAYsWSNJPRJWDD3dEmEBFx4rIck8Vsf53kUCW6BL6xLZrIR/WZVk0WeMZL9EduOIataGiayUez+C9O+zgecLHF7rRKLO2bn0Wx6DglUhAeVruXsYLBAUsXeAV/IuArybrhasJoe9zuTba2Wk7+4CiU+QtkR95/wJyNH+7H85jYYLlW9UJePx0V+cdqZdJF67axJXCR5HSYRT2NjGwLxW3spLVd9Rtdoj9Z6CdcQzVSYhGbn8k6asogF0QWAWx1rrnw0MoMW+vMHJb3Q1ZksvMYXeR5pF8MNk75J4ljx+vfzk1ZLKf22LdAJ5euUsqEeMelZdacxJXANjaYcYucuGlorOVct7BJ9q/DNbMncb/EE+/8h7y2Q/ulb9gTrJ1K0KhwQtmg6ksgyx9DhAvr/SvA==;5:wz7ODddjrzChDYm2uX3ZxJsNfM1yIX50uNOhXCoaFIPL/6kniM069+THiryykzZd3S+YzIWRbXhK8aSOVSmIRwFHd63Ivd7gL78kuOIjEZWO20ET7V0UIPD9zm6FpTnhLSTPliDlYNsONcw1kKpWjY8lKYw6a+2LwRCSiKXR/EQ=;24:7x7ckNWhS3ddz0d7+BkVLGpiVi3Yjtbp4UcuxAaGi8P4EMH76MpMaHT67A3zjWHTVl/xx+ftZRxPFh4TpaUFhKEZyf+2oolHlNosDmbJh3w=⁩
    X-Microsoft-Exchange-Diagnostics: ⁨1;HE1PR0201MB2410;7:gi06UKnxVXkNKB5P3s4xomZS2FNnk+fiD6JUwxFxwaEve3Bkyxct9mu3totc6fyOUkdT9xQspPFPZvL25OLAf93WTCSxqhShqqB4qV6jYIHTeHgaHVAXpV+8Z4daPV3PJdqWZC2/vd8OaRS7Yt2upFf1OzfrphAiuq/w0ft9KeJZ+S4aESLyuGu5kQcV7IO4CfDQOa39NYdKNcu+eKjxqlvFJ+XzqiEQgLXMxSxUSPTgy3vT2T8MThjYbP+2M4Pa⁩
    X-Spamexperts-Class: ⁨ham⁩
    X-Forefront-Prvs: ⁨0632519F33⁩
    Dkim-Signature: ⁨v=1; a=rsa-sha256; c=relaxed/relaxed; d=partnerrealestate.onmicrosoft.com; s=selector1-partnerrealestate-ch; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=PVjky4SGzDYn3+Ozbs6sYXn3RzhgO87IsZn3/yMwsNk=; b=CtoLVU8x4jy1o2x38SbVAGbhF2Qfk6rwiXf+hr1H/42fseWkNQi4gh45VV9q0cvv9Kd73PKu83AWVozPm9gZbgM+kD6LUUOYXLyKFvdAh4rfbDM43+0yZQcxo+z20ZxShQOgr5gMTSRJNxGB+IW8pO7XMykcXkdxTlAAVj4e4vM=⁩

    ========================
    I actually now (before your reply) purchased WP Spamshield and installed it and so far (fingers crossed) it is much better. But will also look at your other solution for some of the other enfold installs that seem to get spam now.

    Thanks heaps.
    Corina

    April 9, 2018 at 3:36 pm #939275
    Ismael

    Hi,

    Thank you for the update. That particular email was sent from this IP Address (15.20.631.10).

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.10; Wed, 4 Apr 2018 03:06:15 +0000⁩

    Is it the same for every spam mail?

    Best regards,
    Ismael

    April 10, 2018 at 1:23 am #939491
    cd2s

    Hi Ismael

    I tested a few. Here are some others. Some are the same over a few days and then it changes….
    Let me know if you need any other information, I can send you more, these are just a few.

    Thanks so much.
    Corina

    ——-

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by AM5PR0201MB2401.eurprd02.prod.outlook.com (2603:10a6:203:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.10; Sat, 24 Mar 2018 02:30:36 +0000⁩

    —–

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by AM5PR0201MB2401.eurprd02.prod.outlook.com (2603:10a6:203:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.609.10; Sat, 24 Mar 2018 02:30:36 +0000⁩

    ——

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2412.eurprd02.prod.outlook.com (2603:10a6:3:81::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Tue, 20 Mar 2018 05:55:07 +0000⁩
    Content-Type: ⁨text/html; charset=utf-8⁩

    ——-

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by DB6PR0201MB2408.eurprd02.prod.outlook.com (2603:10a6:4:34::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 18:15:05 +0000⁩

    ——

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2409.eurprd02.prod.outlook.com (2603:10a6:3:81::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:57:33 +0000⁩

    ——-

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by DB6PR0201MB2406.eurprd02.prod.outlook.com (2603:10a6:4:34::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Sun, 18 Mar 2018 11:21:49 +0000⁩

    —–

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2410.eurprd02.prod.outlook.com (2603:10a6:3:81::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Fri, 16 Mar 2018 12:51:14 +0000⁩

    —-

    Received: ⁨from http://www.partnerrealestate.ch (185.32.125.12) by HE1PR0201MB2409.eurprd02.prod.outlook.com (2603:10a6:3:81::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Tue, 13 Mar 2018 15:26:02 +0000⁩

    April 10, 2018 at 6:26 pm #939971
    siestajoye

    Hi Ismael,

    I should have mentioned that QSXXXX you see in header of spam mail is actually my dedicated server. My email is delivered from that server as well as my client’s contact forms. I am copied on all of those forms. Another 8 spam (mostly .ru) since I posted before. I am attaching the code from the form below along with server information. If there is anything else that I can provide, please let me know.
    Thanks for looking into this,
    Joye

    • This reply was modified 6 years, 7 months ago by siestajoye. Reason: additional info from header of latest spam
    April 11, 2018 at 8:56 am #940289
    Ismael

    Hi,

    Thank you for the info.

    Is the WP Spamshield plugin helping? We can integrate Google’s reCAPTCHA in the theme’s contact form for added security. Add the following code in the functions.php file and replace “SITE PUBLIC KEY HERE” and “SITE SECRET KEY HERE” with your own reCAPTCHAV2 credentials. (https://www.google.com/recaptcha/admin)

    // https://pastebin.com/grRiHvHr

    Best regards,
    Ismael

    April 12, 2018 at 10:14 am #940842
    cd2s

    Hi Ismael

    It was helping but then I realised that it interfered with the Download field from Download Monitor and people could no longer download files, so I had to disable it again.

    We are using Google ReCaptcha already. I integrated it via the Contact Form 7

    I’ll keep you posted if the Spam comes back, as I only disabled the Spam Shield plugin yesterday.

    Thanks for your help & All the best,
    Corina

    April 13, 2018 at 5:48 am #941254
    Rikard

    Hi Corina,

    Thanks for the feedback. We’ll keep the thread open in case you should need any further help on the topic.

    Best regards,
    Rikard

    May 2, 2018 at 12:03 pm #950007
    ForzaLazioNumero1

    Hi Ismael
    i used the code you suggest and work fine only on the home page. I have a contact page and doesn’t works! Could you please what i do wrong?

    May 2, 2018 at 9:14 pm #950292
    HirschGlass

    Hi Ismael,

    I am trying to use your code also. It is working on the contact form but the Submit button does not go back to opacity: 1 and is not active. I am getting an error in the console:

    “TypeError: undefined is not an object (evaluating ‘$.ajax’)
    onVerifyCallback — contact-us:465
    onSuccessfullCallback — contact-us:459”

    May 4, 2018 at 3:51 am #951212
    Ismael

    Hi,

    Thank you for using Enfold.

    Did you compressed the scripts and stylesheets from the Performance panel? Please try to disable those options first then try again. This is an error from the site.

    (index):269 Uncaught ReferenceError: jQuery is not defined
    at (index):269

    Best regards,
    Ismael

    May 6, 2018 at 4:42 pm #952339
    ForzaLazioNumero1

    I updated the theme to 4.3.1 and insert the code you suggest on the function.php, but i can see captcha only on the home page.

    May 7, 2018 at 11:14 am #952607
    cd2s

    Hi Kriesi Support Team

    After installing WP Spamshield and finding out it interfered with the plugin Download Monitor (Downloads stop working and give a javascript error), we had to disable WP Spamshield again.

    I also have the following plugins installed: Contact Form 7 with Recaptcha, Honeypot and a Plugin called Bad Behaviour.

    We had some quiet for a couple of weeks but the last few days the website is getting hammered again with spam. I haven’t updated the theme yet, as I the hosting company has the contract to run updates on the website. So before I contact him (the host), here’s the question.

    The new version of Enfold, should it help with spam issues?
    Thanks so much & Kindest Regards,
    Corina

    May 8, 2018 at 6:09 am #953109
    Ismael

    Hi,

    The new version of Enfold, should it help with spam issues?

    There’s no security upgrades on the latest version so it won’t help but you need to upgrade the theme nevertheless.

    Best regards,
    Ismael

    May 8, 2018 at 6:18 am #953119
    cd2s

    Hi Ismael

    Thanks so much for getting back to me. I just logged in and upgraded to the latest version of Enfold and also updated all plugins and the issue we had with Download Monitor and Spamshield seems to have solved itself.

    I now activated Spamshield. Fingers crossed this will help with the issue.

    Kindest Regards,
    Corina

  • Author
    Posts
Viewing 30 posts - 1 through 30 (of 37 total)
1 2
  • The topic ‘Spam Emails through Contact Form’ is closed to new replies.