Prevent URL spam

I want to Prevent URL spam. I took out the WEBSITE field from comments form. I added a captcha plugin to comments.

I’m still getting the same spam. It even has website filled in, so it seems they’re not going via the form but connecting directly?

How can I stop these?

I can’t use akismet since my blog shares a domain with a commercial site.