Hmmm. That's all extremely interesting. They weren't testing credit cards. I only accept BTC. And only ⚡ at that.
I'm an extremely small site still. I didn't set up captcha because you have to set up Google acct in order for it to work.
Really confusing why they'd want to attack a site that's only selling around 50 orders a wk.
Thank you for looking into it. I didn't even think of using AI. 🙏