Stop Fake Leads & Bot Form Submissions

// Contact form handler (Next.js API route example)
import type { NextApiRequest, NextApiResponse } from 'next';
import axios from 'axios';

export default async function handler(
  req: NextApiRequest,
  res: NextApiResponse
) {
  if (req.method !== 'POST') {
    return res.status(405).json({ error: 'Method not allowed' });
  }

  const { name, email, company, phone, message } = req.body;
  const userIP = req.headers['x-forwarded-for'] || req.socket.remoteAddress;

  try {
    // Validate with IPASIS
    const ipasisResponse = await axios.post(
      'https://api.ipasis.com/check',
      {
        ip: userIP,
        email: email
      },
      {
        headers: {
          'Authorization': `Bearer ${process.env.IPASIS_API_KEY}`,
          'Content-Type': 'application/json'
        }
      }
    );

    const { trustScore, signals } = ipasisResponse.data;

    // Block obvious spam (trustScore < 35)
    if (trustScore < 35) {
      await logBlockedLead({
        email,
        ip: userIP,
        trustScore,
        signals,
        timestamp: new Date()
      });

      return res.status(200).json({
        success: true,
        message: 'Thank you for your submission!'
        // Don't reveal that we blocked it
      });
    }

    // Flag suspicious leads for review (35-65)
    const needsReview = trustScore < 65;

    // Send to CRM (Salesforce, HubSpot, etc.)
    await createCRMLead({
      name,
      email,
      company,
      phone,
      message,
      source: 'website_contact_form',
      trustScore,
      flaggedForReview: needsReview,
      ipasisSignals: signals
    });

    // Send notification to sales (only for high-quality leads)
    if (trustScore >= 65) {
      await notifySalesTeam({
        leadEmail: email,
        leadName: name,
        company,
        message
      });
    }

    res.status(200).json({
      success: true,
      message: "Thank you! We'll be in touch soon."
    });

  } catch (error) {
    console.error('Lead validation failed:', error);
    
    // Fallback: accept lead but mark for review
    await createCRMLead({
      name,
      email,
      company,
      phone,
      message,
      flaggedForReview: true,
      error: 'IPASIS_CHECK_FAILED'
    });

    res.status(200).json({
      success: true,
      message: 'Thank you for your submission!'
    });
  }
}