DGN Webs Spam User Cleaner

DGN Webs Spam User Cleaner scans your WordPress users and identifies likely spam registrations using a multi-signal scoring engine — no external API required for the core features.

Every email address is scored across multiple heuristic signals. Users scoring above your chosen minimum threshold appear in a reviewable list. You decide who to delete — nothing is removed without your confirmation.

Core Features (Free)

• Multi-signal spam scoring — blacklisted domains, invalid email format, Gmail abuse patterns (starts with number, long digit sequences, excessive dots), bot-generated usernames (consecutive consonant clustering, unseparated long strings), random alphanumeric patterns, no vowels, very short usernames
• Never-logged-in flag — optionally add +3 score to users who have never logged in
• Minimum score threshold — slider from 1–20, users below the threshold are excluded from results
• Excluded emails whitelist — protect known-good users from ever appearing in scan results
• Batch scanning — processes 1,000 users per batch, works on sites with hundreds of thousands of users
• Real-time progress bar — scan and deletion progress displayed live
• Domain filter with Only / Except toggle — show or exclude a specific email domain
• Reason filter chips — filter results by any combination of detection reasons
• Score badges — colour-coded Low / Medium / High / Critical
• Bulk selection — select current page or all results across all pages
• Deletion with content reassignment — all content (posts, comments) is safely reassigned to an admin before deletion
• Protected roles — Administrators and Editors can never appear in scan results or be deleted
• CSV export — download the full result set
• Presets — Cautious, Balanced or Aggressive, with optional custom settings
• Safe users — mark genuine users so they are never flagged or deleted
• Comment check — flags users whose comments contain spam links, promotions or repeats (local heuristics, no external service)
• Recent activity — log of your last scans and deletions
• Automatic backup — a CSV of the selected users is downloaded before they are deleted (optional)

Privacy & External Connections

This plugin performs no external connections. MX record validation uses PHP’s built-in checkdnsrr function — a standard DNS query. No user data is sent to any third party. To support the never-logged-in option, the plugin stores a login timestamp in its own user meta key (dgnwebs_last_login) each time a user logs in, and stores your safe-user list and recent activity log in the options table; all of it stays in your database.