The address, drawn, not written
It appears on screen identical to the text around it, but it is no longer text: it cannot be selected and cannot be read automatically.
A filter only moves the messages to another folder. We close the source: your address leaves the site's markup and your forms get a check no human ever feels — you stay just as easy to reach for customers, and become unreadable to bots.
Free check · no account · the result appears on screen
Reading your site
0 pages read
Result for
0
Our public address is in plain sight, in the footer of nearly 300 pages. A person sees it and writes with one click. A bot reading the markup finds nothing: to harvest it, someone would have to read it off the screen and type it by hand.
Check the inbox of .
Book the free checkWhile you wait: See how it gets fixed

Why you get spam
Address-harvesting programs are not looking for your company. They walk through pages and copy anything that looks like an email address. One written a single time in a footer lands, within weeks, on lists that get sold for years. That is why a filter solves nothing: the message still reaches your server, and getting off a list is nearly impossible.
The second source is the address name itself: info@, office@ and contact@ are guessed from the domain, without appearing anywhere on the site. The third is forms with no check — a direct, free lane into your inbox. We close all three, in the way the page is built.
The process
Five steps: the first four change the site, the fifth hands you the number from your own inbox.
Where your address appears: in pages, in the code behind them, in PDFs, in signatures, in the domain's public records. There are almost always more places than anyone remembers.
The address no longer exists as text in what the browser downloads. A person sees it exactly as before and uses it with one click. A program reading the page finds nothing.
Every form that reaches an inbox passes a Cloudflare Turnstile check, plus a few invisible traps. The visitor fills in and sends — and ticks nothing.
info@, office@ and their relatives are closed, and a single public address remains. Real correspondence is taken over; the rest hits a mailbox that no longer exists.
After the work we count, day by day, what still comes in and adjust the thresholds. The final deliverable is a number from your inbox, not a promise from a proposal.
We do not rebuild your site to do this. The changes live in the code, not in what your customer sees on screen.
At a glance
In practice
It appears on screen identical to the text around it, but it is no longer text: it cannot be selected and cannot be read automatically.
No traffic lights to tick. The check is invisible to the visitor, and the decision is made on the server, where a script cannot go around it.
Several mechanisms tell a person from a program by the way the form is filled in. A real visitor never touches them.
Instead of four mailboxes nobody empties, one remains, with a name that cannot be guessed. The old addresses are closed in good order.
We also check what your server says about you when you send, so your own messages do not land in your customers' spam.
The check loads only when someone touches a form. Every other visit downloads not one extra kilobyte.
The proof
On cittago.com the public address left the site's markup on 6 August 2026, together with the check on every form. Before, some days brought as many as 20 spam messages — nine in ten caught by the filter, but the folder still had to be emptied by hand. Since 6 August, the bots have not been back.
Our standard
Look at the footer of the page you are on: our address is there, you can see it and use it with one click — but you cannot select it with the mouse, because it is not text.
Common questions
Your addresses can no longer be read automatically from the page's markup, every form checks that a person is filling it in, and the generic, guessable mailboxes are retired. It is not a filter laid over the messages: it is the way the site is built, so the messages stop setting out towards you at all.
The filter handles the visible part, not the cause. The message still reaches your server, still takes up space, still needs checking now and then in case something real fell in — and your address stays on lists that get resold for years. We work before the filter: the address can no longer be harvested, and the form can no longer be submitted by a machine.
On our own site, days that used to bring up to 20 spam messages have brought zero bot-sent messages since 6 August 2026 — what still arrives, rarely, is written by a human hand. We do not promise the same number to everyone, because it depends on how long your address has circulated and how many lists it has already reached. What we can promise is that the source closes, and that you get the measured number after the first week.
Yes, exactly as before. The address looks identical to the text around it and one click opens the mail program with the address filled in. The difference is invisible to a person and total for a program reading the page.
No. The changes are precise and live only in the code: how the address is displayed, what the forms check, which mailboxes stay open. What your customer sees on screen does not change at all. We work on the existing site, whatever it is built on.
The site work usually fits in one working day, and the addresses are closed in good order, with real correspondence taken over. Then come seven days of measuring, in which we count what still arrives and adjust if needed. You receive the final report at the end of that week.
The companion tool
Give it your site's address; it walks your pages and shows how many addresses a bot would harvest there. The number appears on screen; the report with the exact addresses arrives by email. Free, no account.
The first step
Thirty minutes in which we look at where your address is exposed, what your forms accept today and how much of what you receive daily could stop. You leave with the list, even if you choose to fix it with somebody else.
A quick question, no booking? We answer directly on WhatsApp.
Since 2011 · 5.0 on Google from 21 reviews · 56 brands · 6 countries
What clients say
Cookies
A quick, honest word.
Essential cookies keep the site running. Analytics and marketing tags run only if you agree — to measure and improve, never to sell your data.
No dark patterns: saying no is one click, and we honour it fully.
Read our cookie promise →One thing first
Alexia keeps your conversation in this browser so it survives when you move between pages. That needs your consent to cookies.
You can talk to a human straight away instead — WhatsApp, Telegram or Signal.
AI answers can be wrong and are not a binding offer. Conversations are stored and reviewed to improve the assistant — please don’t share sensitive details here.