@avali Interesting. I've never had any bot spam from the form on my web site (just the occasional manual spam, but I haven't seen even one of those for years).
There's some elementary validation - there's an email address field for which some sort of DNS lookup has to succeed (dunno what exactly - I nicked the code and haven't looked at it for years) - but nothing clever.
I wonder what I am - completely accidentally - doing right?