John Dalesandro

Most spam filters make your visitors do the work by solving captchas, clicking image grids, or proving they are human before they can leave a comment. Analytical Spam Filter takes a different approach. It analyzes how a submission behaves and blocks spam automatically, with no friction for legitimate visitors.
Key Features
<ul>
<li>No captchas</li>
<li>No API keys</li>
<li>No third-party services</li>
<li>Privacy-friendly design</li>
<li>Behavioral spam detection</li>
<li>IP reputation tracking</li>
<li>Content fingerprinting</li>
<li>Cache-compatible operation</li>
</ul>
Install it, activate it, and it starts working.
Spam is identified by observing behaviors that real visitors naturally exhibit. People take time to read before typing, interact with the page, and use a real browser. Bots often skip those signals. The plugin uses those differences to distinguish legitimate submissions from automated spam without interrupting the user experience.
The plugin uses multiple independent detection techniques on every submission. A bot that bypasses one check is likely to be caught by another. This layered approach improves effectiveness over time. Once a spammer’s IP address or message content has been identified, future attempts can be blocked more quickly. Visitors with a previously approved comment are never flagged, regardless of the spam history associated with their IP address.
No visitor data is sent to external spam services, and no account registration or API configuration is required.
All field names added by the plugin are randomized during installation and can be regenerated at any time. This helps prevent bots from targeting the plugin based on known source code signatures. The plugin is compatible with caching plugins when Cache Compatibility is enabled.
The plugin blocks spam submitted through the default WordPress comment form only. It is also automatically compatible with the Micro Contact Form plugin.
<h4>Blocking Methods</h4>
<ul>
<li>Timestamp Blocking — Records when the page loaded and when the form was submitted. Submissions that arrive too quickly to have genuinely read the page, or after the token has expired, are blocked.</li>
<li>Duration Blocking — Measures how long the visitor actively spent filling out the form. Bots fill forms almost instantly. Requires Cache Compatibility to be enabled.</li>
<li>IP Blocking — Remembers which IP addresses have been blocked before. Once an address reaches the configured threshold, future submissions are flagged without running the remaining checks. IP addresses with a previously approved comment are never flagged.</li>
<li>Content Blocking — Remembers the content of blocked spam. If the same message appears again from a different IP address, it is flagged immediately. Content that matches a previously approved comment is excluded from the spam history.</li>
<li>Honeypot — Adds a hidden field that legitimate visitors never see or interact with. Bots that fill every available field are caught. Submissions where the field is missing entirely are also flagged.</li>
<li>Automated Client Detection — Blocks submissions from automated tools that do not identify themselves as a real browser. Legitimate visitors send this information automatically.</li>
<li>Referer Check — Blocks submissions that did not originate from a page on your own site.</li>
<li>URL / Domain Blocking — Flags submissions containing more URLs or domain names than the configured limit. Spam comments frequently contain multiple links.</li>
<li>JavaScript Check — When Timestamp or Duration Blocking is active, the plugin can determine whether JavaScript ran when the form loaded. Bots that skip JavaScript are caught automatically.</li>
<li>Randomized Field Names — Hidden field names are randomized during installation and can be regenerated at any time from the settings page, so bots cannot target the plugin based on known field names.</li>
<li>Trackback Blocking — Optionally block all trackbacks, which are a common source of spam.</li>
<li>Pingback Blocking — Optionally block all pingbacks, which are a common source of spam.</li>
</ul>
<h4>General Options</h4>
<ul>
<li>Send email notifications for blocked spam, valid submissions, or all submissions</li>
<li>Configurable email rate limit to prevent inbox flooding during attacks</li>
<li>Add spam to the WordPress spam queue, or block and reject it immediately</li>
<li>Optionally show rejection reasons to the submitter</li>
<li>Enable Cache Compatibility for caching plugin support and duration blocking</li>
<li>Regenerate security keys at any time from the settings page</li>
</ul>

Analytical Spam Filter

Stop spam without making your visitors prove they're human. No captchas, no accounts, and no external services required.

The 9 Dollar Plugins

The 9 Dollar Comment Spam Mute is your silent, Zero-Touch spam-fighting sidekick. It catches spam comments before they even think about touching your database. No moderation queue. No spam folder. No admin drama. 
Set it up once. Let it work. Never think about spam again.
Why you’ll like it 
Most anti-spam plugins ship your comment data off to who-knows-where, demand an API key, or just shuffle spam into a folder that slowly turns into a digital landfill. This one does things differently: everything runs on your own server, zero external requests, and spam comments are gone before they ever arrive. 
No spam folder to clean. No pending queue. No cloud. No key. No fuss.
How it kicks spam to the curb 
The plugin hooks into WordPress at the earliest possible moment — right before a comment would be saved. If something looks like spam, it’s silently discarded. You get to choose what happens next: with Silent Mode on, bots see a fake success message and never realize they’ve been blocked (so they won’t change tactics). With Silent Mode off, the comment is rejected with a normal error message. Either way: zero database clutter.
Heads-up (important!) 
Discarded spam comments are gone for good. That’s why there’s a mandatory opt-in step — so you’re fully aware before spam protection goes live. You keep full control over all detection settings, and comments only get discarded once you explicitly arm the plugin.
Why this plugin exists 
Most anti-spam plugins: 
– send your data to external APIs 
– require API keys and accounts 
– store spam in folders nobody cleans 
This plugin does none of that. Everything runs locally on your server. No external calls. No cloud dependency. No unnecessary complexity. 
Spam is not stored. It’s gone.
Features (LITE — free) 
– No external API calls — fully GDPR-compliant by design 
– No API key, no account, zero setup fuss — just install, configure once, arm it, and you’re done 
– No external API calls — all spam detection runs locally on your server 
– GDPR-compliant by design — no data leaves your site; IP addresses stored for spam detection only, auto-deleted after 90 days 
– Universal coverage — protects comments on posts, pages, custom post types, WooCommerce product reviews, and all native WordPress comment types 
– Comments get intercepted and discarded before they ever hit the database — no spam folder to clean, ever 
– Silent Mode — bots get a fake success message and never realize they’ve been blocked (keeps them from adapting) 
– Set once, runs automatically — after you arm it, you’re done 
– Works with all native WordPress comment types — posts, pages, custom post types, attachments, WooCommerce reviews 
– Mandatory opt-in — you’re always in control 
– Arm / Disarm control — activate or pause spam protection instantly without losing settings 
– Rate limiting — automatically blocks IPs that submit comments too frequently 
– Discarded comments log — last 50 entries with date, IP, author and reason, auto-pruned after 90 days 
– Sleek & slim — one PHP file, one CSS file, one JS file. No classes, no autoloader, no framework baggage 
– Honeypot trap — invisible field silently catches automated spam bots 
– Speed check — discards submissions faster than any human could type 
– Time token validation — rejects replayed or forged submission tokens older than one hour 
– Link limit — discards comments containing too many links, a classic spam signal 
– Keyword blacklist — case-insensitive spam keyword list, fully customisable, one word per line 
– Whitelist: Email / IP / User-Agent — never block your trusted commenters 
– Daily report email — optional morning summary of discarded spam, sent straight to your inbox
PRO version extras 
Upgrade to PRO and level up your spam defense: 
– Self-learning IP Blocklist — automatically flags repeat offenders (PRO only) 
– Custom Regex Patterns — build your own advanced spam rules (PRO only) 
– Smart Learning Spam Filter — trains itself on your site’s own comment history (PRO only) 
– Adjustable log size — keep as many or as few entries as you like (PRO only) 
– CSV log export — download your discarded comments log anytime (PRO only) 
– WooCommerce Verified Buyer Whitelist — verified customers get a free pass (PRO only) 
– Statistics Dashboard Widget — see your spam stats at a glance (PRO only) 
– Priority support — fast help when you need it (PRO only)
How it all works 
1. Install and activate the plugin. 
2. Go to Spam Mute in your WordPress admin sidebar. 
3. Read the opt-in notice and confirm you’re cool with the fact that spam comments will be permanently discarded. 
4. Tweak your detection settings — honeypot, speed check, link limit, keyword blacklist. 
5. Set Spam Protection to Active and let the silence begin.
That’s it. The 9 Dollar Comment Spam Mute works in the background, quietly doing its thing. Zero-Touch.
<h3>Important notice</h3>
Spam comments are permanently deleted. 
There is no recovery, no trash, no undo. 
A mandatory opt-in ensures you understand this before activation. Nothing happens unless you explicitly enable it.

The 9 Dollar Comment Spam Mute

Auto-discard comment spam before it ever hits your database. Zero-Touch protection — no API keys, no external calls,

Analytical Spam Filter vs The 9 Dollar Comment Spam Mute