WordPress get parameter ‘unapproved’ and ‘moderation-hash’

Spammers use the URL of unapproved comments to share around the Internet. This makes the comments viewable until the comment is dealt with via approval process.

WordPress’ contributors are working on a patch for the next version.
https://core.trac.wordpress.org/ticket/49956