To prevent bots, we have to limit and protect the signup endpoint blocking unknown domains creating a domain's whitelist.