Stop contact form spam in Laravel without a CAPTCHA, then hit back: a JavaScript token, a honeypot and a timing check, plus automatic abuse reports to the spammer's registrar and hosting provider.