Also, your captcha system isn't implemented correctly - You need to check the captcha before checking anything else. I'm able to severely impact the performance of your website with only 10 routines attacking it, and from my computer only (
). Probably not best to use GoDaddy either, as they advertise your personal information everywhere... like your name, phone number, address, etc. You're at the end of your road, yeah? New apartments as of 2012. Anyways, fix your website stuff. Put it behind cloudflare maybe? It's not like it costs anything. And maybe transfer your domain to Google who gives away free domain privacy.
and Thx for all suggestion 
