Category: Anti-Spam

  • Anti-spam protection for WS Form Lite has been released!

    Anti-spam protection for WS Form Lite has been released!

    We have protected one more contact form for WordPress, this is WP Forms lite,

    Anti-Spam by CleanTalk (plugin) protects all kinds of submissions posted through this form against spambots and spam posted by real visitors (with some rate of false/negatives).

    Anyway, to set up the protection follow steps,

    • Download and install WS Form Lite https://wordpress.org/plugins/ws-form/
    • Download and install Anti-Spam by CleanTalk https://cleantalk.org/help/install-wordpress
    • Go to WordPress console -> Settings -> Anti-Spam by CleanTalk.
    • Click ‘GET ACCESS KEY’ button.
    • Wait until the plugin synced data with the cloud.
    • Copy a form short code of from WordPress console -> WS Form -> Forms.
      • For example: [ws_form id=”1″]
    Screenshot 2025 06 16 at 12.46.47 PM
    Screenshot 2025 06 16 at 12.46.47 PM
    • Post the short code in any post/page on your site.
    Screenshot 2025 06 16 at 12.47.05 PM
    Screenshot 2025 06 16 at 12.47.05 PM
    • Go to the page as a regular website visitor (you must be logged out from WordPress console, for example use Anonymous mode in your browser).
    • Test the form with whatever First, Last name and use email st********@****le.com. This is email marked to test “spam” submission.
    • If everything is fine, you have a message,

    *** Forbidden. Sender blacklisted. Anti-Spam by CleanTalk. ***

    Screenshot 2025 06 16 at 12.30.54 PM
    Screenshot 2025 06 16 at 12.30.54 PM

    That’s all. Enjoy spam free website!

  • 5 Best Free WordPress Forms Plugins Protected by CleanTalk Anti-Spam

    5 Best Free WordPress Forms Plugins Protected by CleanTalk Anti-Spam

    top 5 plugins

    How many free WordPress forms are there in the catalog?

    Free WordPress forms are not always 100% free, actually. WordPress catalog has hundreds of form plugins, though. We’ve collected top contact form plugins that are totally free or have a free version, not limited by time period.

    All of the forms are absolutely compatible with Anti-Spam by CleanTalk spam protection giving you peace of mind without captchas or annoying puzzles.

    Here are the top 5 free WordPress form plugins that combine usability with anti-spam protection.

    1. Contact Form 7

    contact form 7

    With over 5 million active installations, Contact Form 7 is a no-frills, lightweight solution trusted by millions. It employs sophisticatedly modularized architecture and its original Schema-Woven Validation technology.

    Features:

    • Fully free and open-source
    • Supports shortcodes and basic customization
    • Original Schema-Woven Validation technology

    Download Contact Form 7 | Protect Contact Form 7 from spam

    2. WPForms Lite

    wpforms

    WPForms Lite is perfect for beginners. The drag-and-drop builder and ready-made templates make it one of the easiest free form plugins available.

    Features:

    • Drag-and-drop interface
    • Mobile-friendly and fast
    • Lots of pre-built form templates

    Download WPForms | Protect WPForms from spam

    3. Ninja Forms

    ninja free wordpress form
    ninja forms

    Ninja Forms offers powerful customization in its free version, and its user-friendly builder is ideal for both beginners and developers.

    Features:

    • Extendable via 40+ add-ons
    • 24+ free drag-and-drop form fields
    • Free email notifications on submission

    Download Ninja Forms | Protect Ninja Forms from spam

    4. Formidable Forms (Lite)

    Formidable free wordpress form

    Formidable Forms Lite offers a sleek drag-and-drop interface and is perfect for users who want to grow into more advanced form-building.

    Features:

    • Ideal for data-driven forms
    • Templates and basic logic included
    • Advanced form customization

    Download Formidable | Protect Formidable Forms from spam

    5. Forminator

    forminator free wordpress form

    It’s a rising star in free WordPress forms because Forminator is rich in features even in the free version, offering quizzes, polls, and payment support.

    Features:

    • Has a visual builder
    • Includes forms, polls, quizzes, payments and calculators
    • Accepts both Stripe and PayPal payments

    Download Forminator | Protect Forminator from spam

    Why use CleanTalk for free WordPress forms

    Free WordPress form plugins need to be protected not least then the others. The right anti-spam solution for your forms not only protects your form from spam emails and messages, but also:

    • Won’t make your visitors struggle with CAPTCHAs or puzzles;
    • Protects all your forms on the site at once;
    • Protects your site from spam bots even before they reach it;
    • Is set up with no coding needed.

    But don’t just take our word for it, check it out for yourself at cleantalk.org!

  • Gwolle Guestbook spam protection for WordPress

    Gwolle Guestbook spam protection for WordPress

    CleanTalk added spam protection for Gwolle Guestbook plugin using direct form integration. So in case, you prefer using this type of forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Gwolle Guestbook but also many others.

    Download CleanTalk Anti-Spam plugin | Download Gwolle Guestbook 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Gwolle Guestbook from spam.

    How to check Gwolle Guestbook Spam Protection

    You can test the work of Anti-Spam protection for your Gwolle Guestbook form by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form.

    Screenshot 2025 05 20 at 16.58.52

    After submitting the form, you will see a block message about the block on the form submission.

    Screenshot 2025 05 20 at 17.02.40

    Once again, this screen is only for spam bots, so don’t pay much attention to It’s view.

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your forms from spam in 5 minutes.

    The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • CleanTalk Gravity Forms false/positive research

    CleanTalk Gravity Forms false/positive research

    We are happy to remind all our customers that we implemented a reliable Anti-Spam protection for the Gravity Forms plugin a long time ago:

    To date, the plugin has filtered a huge amount of spam messages on Gravity Forms and made many people a little happier.

    We are constantly monitoring the protection quality of our Anti-Spam plugin, and recently, we found a review on WordPress where our customer reported some issues with Gravity Forms protection:

    https://wordpress.org/support/topic/finally-348

    The problem was that some submissions were mistakenly blocked. The common reason for false/positives is incorrectly detected request parameters. This can happen due to the following:

    – Specific website plugins and their settings

    – Specific website themes

    – JavaScript errors on a website 

    We started our investigation. Our Technical Support team reviewed all support requests related to Gravity Forms over the last few months and found no issues. 

    Our engineers have also reviewed the feedback in the plugin’s requests from our customer. There was nothing to analyze either. But that was not enough to stop our investigation, and we took further action. We ran additional tests in our environment and checked the protection with different plugin settings. The protection worked perfectly, all data was accurately extracted and sent correctly. 

    We can confirm that the default plugin settings are optimal for protecting Gravity Forms, and there is no need to change them unless absolutely necessary.

    Based on our investigation, we haven’t found any common problems with Gravity Forms protection. Possible false/positives are individual; if you are experiencing any issues with the Anti-Spam plugin, we strongly recommend contacting our support team. Please mark requests for us using this guide and contact us at su*****@*******lk.org or use our private Ticket System.

    To find a solution, our support team will do additional tests and analyze the request parameters. 

    Your feedback helps us become better every day!

  • Spam protection is available for HubSpot and Leaky Paywall

    Spam protection is available for HubSpot and Leaky Paywall

    I’m glad to announce our experienced developers added spam protection to Anti-Spam by CleanTalk for Leaky Paywall and HubSpot users!

    The protection works in this way,

    To active protection for both services, simply install Anti-Spam by CleanTalk for WordPress,
    https://cleantalk.org/help/install-wordpress

    Make sure you are using at least 6.50 version of our plugin.

    Have any questions? Drop a message in the comment form down below!

    Have fun in promoting your business online!

  • Newsletter spam protection for WordPress in 5 minutes

    Newsletter spam protection for WordPress in 5 minutes

    CleanTalk added spam protection for Newsletter plugin using direct form integration. So in case, you prefer using this type of forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Newsletter but also many others.

    Download CleanTalk Anti-Spam plugin | Download Newsletter 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Contact Forms from spam.

    How to check Newsletter Spam Protection

    You can test the work of Anti-Spam protection for your Contact Forms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form.

    Снимок экрана 2025 04 14 в 10.20.23

    After submitting the form, you will see a block message about the block on the form submission.

    Снимок экрана 2025 04 14 в 09.19.30

    Once again, this screen is only for spam bots, so don’t pay much attention to It’s view.

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your forms from spam in 5 minutes.

    The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • Awesome Support Forms Spam Protection for WordPress

    Awesome Support Forms Spam Protection for WordPress

    CleanTalk added spam protection for Awesome Support using direct form integration. So in case, you prefer using this type of forms be sure to use the most effective Anti-Spam plugin. Read the guide below and learn 4 steps to protect all your contact forms from spam.

    Once the CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Awesome Support but also many others.

    Download CleanTalk Anti-Spam plugin | Download Awesome Support 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «CleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now you How to completely protect your Contact Forms from spam.

    How to check Awesome Support Spam Protection

    You can test the work of Anti-Spam protection for your Contact Forms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form.

    awesome support test

    After submitting the form, you will see a block message about the block on the form submission.

    If you have any questions, add a comment and we will be happy to help you.

    Create your CleanTalk account – Register now and protect your Contact Forms from spam in 5 minutes

    Update

    The protection works only for website visitors, not for website admins. Be sure to test the form protection using Incognito mode.

    Additional features

    • CleanTalk protects all forms at once: comments, registrations, feedbacks, contacts, reviews.
    • Installation takes about 1-2 minutes.
    • Smart 99% protection against spambots.
    • Always online – 24/7 technical support.
    • Logs, SpamFireWall, personal lists, country filters, stop-words, and many others.

    Discover the complete list of CleanTalk Anti-Spam plugin features here.

  • CleanTalk Anti-Spam is now available for Fluent Forms users

    CleanTalk Anti-Spam is now available for Fluent Forms users

    I’d love to announce that CleanTalk Anti-Spam technology is now available to Fluent Forms users as a built-in Anti-Spam solution.

    You can find it under Settings,

    WordPress console -> Fluent Forms -> Global settings -> Security -> CleanTalk

    CleanTalk with Fluent forms supports almost same stack of technologies like native Anti-Spam plugin by CleanTalk,

    • Automated filtration bots.
    • Filter spammers by IP, Email, IP networks.
    • Real-time email verification for existence, fake or real email.
    • Anti-Spam logs up to 45 days.
    • Tech support, 27/7.
    • Customize message to forbidden visitors.
    • Delegate control of your websites to other accounts at CleanTalk.org.

    We’ve been testing this integration since January 6, 2025, it’s firm and stable by now. Anyway, if you have any questions or issues, just drop a message in the comment section down below.

    In order to activate the protection, add a new website to the Dashboard or sign up for an account.

  • te*****@*****le.com and te**@*****le.com Are Sending Spam and Malicious Requests – How to Stop Them

    te*****@*****le.com and te**@*****le.com Are Sending Spam and Malicious Requests – How to Stop Them

    If you have got a lots of spam or suspicious messages from te*****@*****le.com or te**@*****le.com lately? You’re not alone — these email addresses are widely used by spammers and hackers for sending spam, phishing attempts, and even code injection attacks.

    At CleanTalk Anti-Spam, we’ve seen tons of spam originating from these addresses, every day we block approximately 110,000 requests to our clients’ websites from testing @example.com. So they’ve been on our blacklist for quite some time already:

    At CleanTalk, we’ve been filtering out spam for a long time, and these two addresses have been stuck on our blacklist for a while now:

    te*****@*****le.com on *****@*****le.com” target=”_blank” rel=”noreferrer noopener”>CleanTalk blocklist

    te**@*****le.com on **@*****le.com” target=”_blank” rel=”noreferrer noopener”>CleanTalk blocklist

    People online are already talking about issues with these emails in several forums and communities:

    WpForo Community discussion

    Reddit cybersecurity thread

    ConcreteCMS forum report

    Shopware forum on injection attempts

    Modified-shop.org forum topic

    How to Protect Your Website From Spam and Malicious Requests
    The easiest way to protect your site from spam attacks is using CleanTalk Anti-Spam. It automatically filters submissions in the background and blocks spammy emails and malicious bots from getting through to your website.

    If you want even stronger protection, just block the whole *@example.com domain. Here’s how you do it in CleanTalk:
    Use our instructions to install the anti-spam plugin on your site and connect it to the cloud, it takes no more than 5 minutes.
    We have developed plugins for all popular CMS, if your site is not made using CMS, you can use our API or libraries.

    Look at instruction How to use CleanTalk Personal BlackLists https://cleantalk.org/help/blacklist-usage.

    Once this is done, you will no longer receive spam from example.com or any other.

    Stay safe!

  • How to validate registrations using CleanTalk API with BVScript

    How to validate registrations using CleanTalk API with BVScript

    Lately, we sometimes get questions like “The code samples on GitHub are written in C#, they don’t seem to convert to VB. Do you have any code sample for visual basic ?”

    The good news is that now we have! The project below demonstrates how to use the Cleantalk API with VBScript to validate registrations. Feel free to ask any questions – we’re here to help.

    Requirements

    1. Register a Cleantalk account https://cleantalk.org/register?product=anti-spam
    2. Obtain the access key from the CleanTalk account https://cleantalk.org/help/add-website

    Usage

    1. Place the code of Cleantalk class in your VBScript file.

    VB
     ```vbscript
     Class CleantalkClass
         Private auth_key
         Private check_message
         Private user_email
         Private user_ip
         Private user_name
         Private user_js_state
         Private user_submit_time
         Private form_event_token
         Private response
         Private verdict
         Private codes
         Private comment
         ... other class code
         ... other class code
       else
            validateResponse = false
       end if
         end function
      
      end class
     ```

    2. Initialize the Cleantalk class instance, use your own access key when instantiating.

    VB
    Dim Cleantalk : Set Cleantalk = (New CleantalkClass)("your_access_key", "check_newuser")

    3. Set user data when the logic is ready to check the user.

    VB********@*****le.com") Cleantalk.setUserIP("10.10.10.10") Cleantalk.setUserName("John Doe") Cleantalk.setUserJSState("1") Cleantalk.setUserSubmitTime("5") Cleantalk.setFormEventToken("a_32_symbols_event_token_value")” style=”color:#adbac7;display:none” aria-label=”Copy” class=”code-block-pro-copy-button”>
    Cleantalk.setUserEmail("st********@*****le.com")
    Cleantalk.setUserIP("10.10.10.10")
    Cleantalk.setUserName("John Doe")
    Cleantalk.setUserJSState("1")
    Cleantalk.setUserSubmitTime("5")
    Cleantalk.setFormEventToken("a_32_symbols_event_token_value")

    4. Send request to the API.

    VB
    Send request to the API:

    5. Validate the response.

    VB
    If Cleantalk.validateResponse Then
        If Cleantalk.getVerdict = 1 Then
            WScript.Echo "Validation success. User is allowed."
        Else
            WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment
        End If
    Else
        WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment
    End If

    Important! Do validation every time after response gathering.

    Functions

    • setUserEmail(email)
    • setUserIP(ip)
    • setUserName(name)
    • setUserJSState(jsState)
    • setUserSubmitTime(submitTime)
    • setFormEventToken(eventToken)
    • sendRequest()
    • validateResponse()
    • getVerdict()
    • getCodes()
    • getComment()

    Example

    VB**@*****le.com") Cleantalk.setUserIP("192.168.1.1") Cleantalk.setUserName("John Doe") Cleantalk.setUserJSState("0") Cleantalk.setUserSubmitTime("0") Cleantalk.setFormEventToken("your_event_token") Cleantalk.sendRequest If Cleantalk.validateResponse Then If Cleantalk.getVerdict = 1 Then WScript.Echo "Validation success. User is allowed." Else WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment End If Else WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment End If” style=”color:#adbac7;display:none” aria-label=”Copy” class=”code-block-pro-copy-button”>
    Dim Cleantalk : Set Cleantalk = (New CleantalkClass)("your_auth_key", "check_message")
    
    Cleantalk.setUserEmail("us**@*****le.com")
    Cleantalk.setUserIP("192.168.1.1")
    Cleantalk.setUserName("John Doe")
    Cleantalk.setUserJSState("0")
    Cleantalk.setUserSubmitTime("0")
    Cleantalk.setFormEventToken("your_event_token")
    
    Cleantalk.sendRequest
    
    If Cleantalk.validateResponse Then
        If Cleantalk.getVerdict = 1 Then
            WScript.Echo "Validation success. User is allowed."
        Else
            WScript.Echo "Validation success. User is blocked. Reason: " & Cleantalk.getCodes & " " & Cleantalk.getComment
        End If
    Else
        WScript.Echo "Validation failed. Code: " & Cleantalk.getCodes & " Comment: " & Cleantalk.getComment
    End If

    Implementing of BotDetector JavaScript library

    To use the BotDetector JavaScript library, you need to include the script in the HTML of the page.

    VB
    <script src="https://moderate.cleantalk.org/ct-bot-detector-wrapper.js"></script>

    This script will automatically detect the form submission event and send the data to the Cleantalk API.

    Please note, that the script does not perform any checks, just sends the user’s frontend data (like JavaScirpt state, mouse position etc.) to the API.

    Example

    VB
    <!DOCTYPE html>
    <html lang="en">
       <head>
       <meta charset="UTF-8">
       <title>Register</title>
       <!--Bot-detector JS library wrapper. This script must be added to the HTML of the page.-->
       <script src="https://moderate.cleantalk.org/ct-bot-detector-wrapper.js"></script>
    </head>
    <body>
       <form method="post" action="your_form_handler_script">
          <label for="user_name">User name</label>
          <label for="user_email">User email</label>
          <input type="text" name="user_name" id="search_field" /> <br />
          <input type="text" name="user_email" id="search_field" /> <br />
          <input type="submit" />
       </form>
    </body>
    </html>

    When you got added the script, the form will be updated with hidden event_token field after the script loaded. This field value you should transfer to VB Script

    Once the token is provided in the API request, the VB Script will make the API takes in count the frontend data.

    Make note, that data provided on event_token have the higher priority than the data set by optional VB Script setters.