105
Credit Cards Are Vulnerable To Brute Force Kind Attacks
(metin.nextc.org)
This is a most excellent place for technology news and articles.
That would scare away real paying customers
You might want to try something like Anubis on both the signup and order pages. Real users will either not be stopped, or will only hit it once, and no user interaction is required to continue, but bot users will be slowed down enough to, hopefully, disuade them from returning.
Could just hide it behind a progress spinner? But it'll slow down the account creation.