Turning off the http referrer check won't guarantee that forms submitted came from your site(s) only.
In Control Panel » Primary Settings » Advanced Options » Domains for HTTP Referrer Check: Add both domains as shown in the example and try enabling the referrer check again and see if that does it...