Notes from building Pengon.
How we’re thinking about AI spam, what we’re learning from real Squarespace inboxes, and the occasional behind-the-scenes from a small Zürich studio.
-
ProductreCAPTCHA was on. This spam got through anyway. (2026)
We watched a spam submission sail past Google reCAPTCHA on a live Squarespace form. Here's why — reCAPTCHA judges the sender, never the message. That's the gap.
-
EngineeringTwo contact-form messages. One real. How the filter tells them apart.
Two short messages, both asking for a call, both from strangers. One scored 0.15 (legit). One got blocked. Here's exactly what the model saw — and why specificity is the whole game.
-
OpinionWhat contact-form spam really costs your Squarespace business (2026)
The visible cost of contact-form spam is the time you spend reading it. The invisible cost is the real client whose enquiry got buried. Here's the math.
-
Spam patternsAI contact-form spam in 2026: 5 patterns hitting Squarespace inboxes
AI spam bypasses reCAPTCHA and lands in your Squarespace inbox looking like a warm lead. Here are the 5 patterns we see most — and why filters miss them.
-
EngineeringStop Squarespace contact form spam — without blocking real clients (2026)
Nearly 28% of web form submissions are spam, and AI now beats reCAPTCHA. Here's why your Squarespace contact form still gets hit, and how to actually stop it.