Threat Intelligence Log
Deep dives into botnet behavior, spam trends, and security best practices from our research team.
The Zero Spam Threat Intelligence Log is a free research hub covering website spam and abuse: how botnets probe WordPress forms, why CAPTCHA services keep changing their terms, and which fixes actually hold. Every article is written by the team that has tracked global spam reputation data since 2018, and revised as threats change.
- Protecting sites since 2018
- Free WordPress.org plugin
- Written by practitioners, not marketers
Latest analysis
Fresh from the research desk
New incident write-ups and fixes, newest first.
Yam Store Takedown: How Expired Domains Fuel Phishing
Microsoft disrupted Yam Store, a phishing marketplace tied to over a billion scam emails and texts that reused expired company names. What it means for your domains.

Ghostscript CVE-2026-39919: Check WordPress PDF Uploads
Read →: Ghostscript CVE-2026-39919: Check WordPress PDF UploadsA Ghostscript flaw lets crafted PDFs corrupt memory when servers make thumbnails. How to check whether your WordPress site renders PDF uploads,…

Phishing Emails Now Hide Orders for Your AI Assistant
Read →: Phishing Emails Now Hide Orders for Your AI AssistantPhishing emails now hide invisible instructions for AI assistants that summarize mail. How hidden prompt injection works and 5 ways to keep…
Reputation lookup
Check an IP or email address right now
Paste an address from your form submissions and see what the Zero Spam network knows about it — abuse history, first and last sighting, and the blocklists it appears on.
Browse by topic
Pick the shelf you need
Keep junk out of your forms, keep attackers out of your site, or build the reputation network into your own stack.
Spam Protection
Contact form spam, comment spam, CAPTCHA alternatives, Turnstile and reCAPTCHA troubleshooting.
15 articlesSite Security
Malware, compromise cleanup, incident response, and the long-run data on how website abuse is shifting.
14 articlesBuild on the API
Not an article category — the reputation endpoint itself, with quotas, response fields, and client examples.
Developer docsExplore by problem
What is actually going wrong?
AI (6) AI bots (4) bot protection (6) CAPTCHA (6) conversion optimization (1) email security (2) form security (8) fraud prevention (4) Google Cloud (3) incident response (8) malware (1) privacy & compliance (2) reCAPTCHA (4) security hardening (20) SEO spam (3) social engineering (1) threat intelligence (17) user experience (3) website security (18) WordPress security (19)
The archive
Every article, newest first

Google Flags Fake Author Profiles: 5 Checks for Your Site
Google now calls fake author profiles, such as AI headshots, made-up names and false credentials, a form of deception. What changed and…

Fake AI Ad Tools Steal Ad Accounts: 5 Checks for Marketers
Fake ChatGPT, Gemini and Meta Muse ad tools use a fake Connect window and a live operator to steal ad-account logins and…

WordPress 7.1.3: Pending Spam Comments Could Carry XSS
WordPress 7.1.3 fixes 7 flaws, including a stored XSS on the Comments screen exploitable via pending comments. Update now and don’t click…

Phishing Tripled in Microsoft’s 2026 Report: 5 Site Checks
Phishing was the way in for 23% of intrusions in Microsoft’s 2026 Digital Defense Report, up from 7%. What AI phishing means…

AI Slop Is Spam: What Google’s Bug Bounty Pause Teaches
Google paused its open source bug bounty after a flood of invalid automated reports. Here’s why AI slop is a spam problem,…

Cloudflare AI Bot Settings: Don’t Block Googlebot (2026)
Blocking AI Training bots in Cloudflare also blocks mixed-purpose crawlers like Googlebot. Here’s what changed on September 15 and how to check…

Bad Bots Up 124%: 5 Takeaways From DataDome’s 2026 Report
DataDome’s 2026 report says bad bot traffic grew 124% and AI bots now hit login pages hard. What it found, what it…

Google’s September 2026 Spam Update: 6 Checks for Your Site
Google’s September 2026 spam update is rolling out through early October. Here’s what happened and six checks for comment spam, fake profiles…

OpenAI’s Rogue Agents vs CAPTCHAs: 5 Lessons for Sites
OpenAI’s test agents tried to beat a CAPTCHA to create accounts and posted “agent spam” on outside sites. Here’s what happened and…
Stop reading, start blocking
Plans that fit the article you just read
Every plan uses the same reputation network the research above is based on. Start free, upgrade only when your request volume asks for it.
Explorer API License
Best for trying it out.
- 10 requests/month
- Single site/app license
- Threat confidence
- Basic source info
Essentials API License
Best for small sites/apps.
- 10,000 requests/month
- Single site/app license
- Threat confidence
- Source intelligence
- Activity history
Business API License
Best for busy businesses.
- 50,000 requests/month
- Single site/app license
- Everything in Essentials
- IP abuse reports
- Email abuse reports
Platform API License
Best for unlimited coverage.
- Unlimited requests/month
- Covers 3 sites/apps
- Everything included
- Priority support
- Integration support
Explorer API License
Best for trying it out.
- 10 requests/month
- Single site/app license
- Threat confidence
- Basic source info
Essentials (Yearly)
Best for small sites/apps.
- 10,000 requests/month
- Single site/app license
- Threat confidence
- Source intelligence
- Activity history
Business (Yearly)
Best for busy businesses.
- 50,000 requests/month
- Single site/app license
- Everything in Essentials
- IP abuse reports
- Email abuse reports
Platform (Yearly)
Best for unlimited coverage.
- Unlimited requests/day
- Covers 3 sites/apps
- Everything included
- Priority support
- Integration support
Questions
About this hub
Yes. Zero Spam checks the reputation of the IP address and email address behind each submission against a network of known abusive actors, so most spam is rejected before a human is ever asked to prove anything. Many sites remove reCAPTCHA or Turnstile entirely; others keep a challenge as a last resort for high-risk traffic only.
Incident write-ups are published as we confirm the details and are amended if the attack changes. Evergreen guides with a year in the title are reviewed at least quarterly, and the review date appears at the top of each article.
No. Every guide is free to read, and the free Explorer plan covers a small number of reputation requests a month, which is enough to check suspicious addresses by hand. Paid plans start when you want the plugin or API checking every submission automatically.
Ben Marshall, full-stack developer and engineering manager, writes and maintains the log, drawing on Zero Spam network data. Zero Spam is a service provided by Highfivery Studio and has been tracking spam reputation since 2018.
Get protected
Reading about form spam will not stop it
Install the plugin, connect a free key, and let the network reject known abusive traffic before it reaches your inbox. No puzzles for your visitors.












