Riccardo Rosignoli

🛡️ DigitaleZen AntiSpam Shield for CF7 is a lightweight yet powerful plugin that protects Contact Form 7 forms from spam, bots, and suspicious submissions.
It combines a multi-layered defense system, including:
<ul>
<li>Invisible honeypot field</li>
<li>Hourly-expiring SHA256 token</li>
<li>Automatic flood protection</li>
<li>Temporary IP firewall</li>
<li>Real-time blacklist updates every 24h (StopForumSpam, Spamhaus, SpamCop)</li>
<li>Advanced CSV logging</li>
<li>Interactive dashboard with chart and bot log</li>
<li>Weekly report via email (configurable)</li>
</ul>
<blockquote>
✅ No complex setup. No CAPTCHA. No data collection. 
 Works out-of-the-box.
</blockquote>
<h3>Features</h3>
<ul>
<li>🔐 Invisible honeypot protection </li>
<li>⏱️ Minimum send time (4 seconds) </li>
<li>🔑 SHA256 token valid for 2 hours </li>
<li>🧱 Soft IP firewall (10-minute ban) </li>
<li>📩 Dynamic blacklist: IPs, emails, domains, keywords, usernames </li>
<li>💥 Flood protection: 3 submissions = auto ban </li>
<li>🧾 Detailed logging (date, IP, email, reason, trigger) </li>
<li>📈 Interactive chart of blocked spam by type and timeframe </li>
<li>📬 Weekly email reports </li>
<li>🧘 Clean and minimalist DigitaleZen-style UI </li>
<li>🔒 Admin-only dashboard access</li>
</ul>
<h3>External services</h3>
This plugin periodically downloads an updated anti-spam blacklist from a service operated by DigitaleZen and hosted on Google Apps Script (domain: script.google.com).
• Purpose: fetch a JSON list of abusive/disposable emails and domains used by the plugin’s firewall checks. 
• When data is sent: once per day via WP-Cron (and when an admin triggers a manual update). 
• What data is sent: no form submissions and no user personal data are sent. The request is server-to-server (HTTP GET) and only standard headers (e.g., User-Agent) are included. 
• Storage: the downloaded JSON is stored locally within your WordPress site (e.g. under wp-content/uploads in a plugin-specific folder).
Provider policies (service owner): DigitaleZen — https://digitalezen.it/terms/ • https://digitalezen.it/privacy-policy/ 
Hosting platform policies (infrastructure): Google — https://policies.google.com/terms • https://policies.google.com/privacy

DigitaleZen AntiSpam Shield for CF7

The ultimate shield for Contact Form 7. Blocks spam with honeypots, tokens and a live blacklist—no CAPTCHA.

Jeff Sterup

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well. 
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

Honeypot Toolkit


This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using Wordpress. Thanks a lot!


Amazing! A must have for every site!

Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.

DigitaleZen AntiSpam Shield for CF7 vs Honeypot Toolkit