AntiSpam for Contact Form 7 on new websites

1. AntiSpam for Contact Form 7 appeared on 19 new sites in the last 30 days.^[1]
2. Eight in ten new AntiSpam for Contact Form 7 sites also use jQuery.

The line is the 7-day average share of new sites that use AntiSpam for Contact Form 7, over the last 89 days. It starts at our first detection. The shaded area was measured against a different set of sites, so the line can step there without AntiSpam for Contact Form 7 itself changing.^[2]

#	Movement	Tool	Share of all sites	Share of category	Bar
1	–	HSTS	47.5%	87.6%
2	–	Cloudflare Bot Management	13.7%	25.2%
3	–	Google reCAPTCHA	1.9%	3.5%
4	▲1	Anubis	0.1%	0.2%
5	▼2	DDoS-Guard	0.1%	0.2%
…
46	▲1	AntiSpam for Contact Form 7	<0.1%	<0.1%

All-time shares across the new sites we track: of all of them, and of the sites using any Security tool. AntiSpam for Contact Form 7 is typically used alongside HSTS rather than instead of it. All 398 in Security

Tool	Sites with both	vs all new sites	Bar
jQuery	42	5.8x

Tools that turn up far more often on AntiSpam for Contact Form 7 sites than on new sites in general, and how many times as common each one is there.

1 of the 51 sites using AntiSpam for Contact Form 7 are product launches we list individually. The other 50 are sites we found crawling the wider web: they count towards the figures above, but we do not publish them one by one. They are included in the StackScope API and in Stackdar alerts.

Site	Found	Also detected
Infinite.exe hack4change.co · Brazil	Aug 20

The StackScope API serves all 51 sites using AntiSpam for Contact Form 7, filterable and exportable, from £15 a month.

1. These figures cover websites that went live since April 2026, not the web as a whole.
2. Amber: 8 July to 10 September 2026, before we improved our infrastructure to index new sites much sooner, often on the day they go live. Sites found that early often haven't finished setting up, so anything usually added after launch reads lower from 10 September. We record each site as it was when we found it.
3. Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. Too few sites state their country plainly for the usual count, so this one also counts single signals: a country domain ending, a phone number (for North America, its area code), a location the site declares in its own page metadata, or a country-specific vendor stack and the page language where they agree and nothing contradicts them. Read these as likely rather than certain.