[wp-trac] [WordPress Trac] #39709: Add filler content to New Site Registration email to avoid space ratio spam rule

[WordPress Trac]

#39709: Add filler content to New Site Registration email to avoid space ratio spam
rule
-------------------------+-------------------------
 Reporter:  iandunn      |       Owner:  (none)
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:
Component:  Mail         |     Version:
 Severity:  normal       |  Resolution:  worksforme
 Keywords:               |     Focuses:  multisite
-------------------------+-------------------------

Comment (by SirLouen):

 After check #40081 I've was wondering how the `New Site Registration`
 emails looked today. So I tested with my own raw data

 {{{
 Return-Path: <test at example.com>
 Received: from example.com (example.com. [212.18.121.3])
         by 8f6e7071a180 (Mailpit) with SMTP
         for <test at example.com>; Tue, 15 Jul 2025 09:54:06 +0000 (UTC)
 Date: Tue, 15 Jul 2025 09:54:06 +0000
 To: test at example.com
 From: test <test at example.com>
 Subject: New Site Registration: http://example.com:8889/harry
 Message-ID:
 <exz15gY8fniQJyL37YqvT7ihC0vtDSljaijkPeVeK8s at localhost.localdomain>
 X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8

 New Site: Harry Site
 URL: http://example.com:8889/harry
 Remote IP address: 172.18.0.1

 Disable these notifications: https://example.com:8889/wp-
 admin/network/settings.php
 }}}

 And here are the results by SpamAssassin:

 {{{
 {
   success: true,
   score: '0.9',
   rules: [
     {
       score: '-1.9',
       description: 'BODY: Bayes spam probability is 0 to 1% [score:
 0.0022]'
     },
     {
       score: '0.0',
       description: 'RBL: ADMINISTRATOR NOTICE: The query to Validity was
 blocked.  See https://knowledge.validity.com/hc/en-
 us/articles/20961730681243 for more information. [212.18.121.3 listed in
 sa-accredit.habeas.com]'
     },
     {
       score: '0.0',
       description: 'RBL: ADMINISTRATOR NOTICE: The query to
 zen.spamhaus.org was blocked due to usage of an open resolver. See
 https://www.spamhaus.org/returnc/pub/ [212.18.121.3 listed in
 zen.spamhaus.org]'
     },
     {
       score: '0.0',
       description: 'RBL: ADMINISTRATOR NOTICE: The query to Validity was
 blocked.  See https://knowledge.validity.com/hc/en-
 us/articles/20961730681243 for more information. [212.18.121.3 listed in
 bl.score.senderscore.com]'
     },
     {
       score: '0.0',
       description: 'URI: Uses non-standard port number for HTTP'
     },
     {
       score: '2.8',
       description: 'WordPress login/admin URI, possible phishing'
     },
     { score: '0.0', description: 'To == From and direct-to-MX' }
   ],
   report: ' pts rule                               description
 \n' +
     '---- ----------------------
 --------------------------------------------------\n' +
     '-1.9 BAYES_00                           BODY: Bayes spam probability
 is 0 to 1% [score:   \n' +
     '                                        0.0022]
 \n' +
     ' 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
 The query to Validity  \n' +
     '                                        was blocked.  See
 \n' +
     '
 https://knowledge.validity.com/hc/en-us/articles/…\n' +
     '                                        20961730681243 for more
 information. [212.18.121.3\n' +
     '                                        listed in sa-
 accredit.habeas.com]                 \n' +
     ' 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS        RBL: ADMINISTRATOR NOTICE:
 The query to           \n' +
     '                                        zen.spamhaus.org was blocked
 due to usage of an   \n' +
     '                                        open resolver. See
 \n' +
     '
 https://www.spamhaus.org/returnc/pub/             \n' +
     '                                        [212.18.121.3 listed in
 zen.spamhaus.org]         \n' +
     ' 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED      RBL: ADMINISTRATOR NOTICE:
 The query to Validity  \n' +
     '                                        was blocked.  See
 \n' +
     '
 https://knowledge.validity.com/hc/en-us/articles/…\n' +
     '                                        20961730681243 for more
 information. [212.18.121.3\n' +
     '                                        listed in
 bl.score.senderscore.com]               \n' +
     ' 0.0 WEIRD_PORT                         URI: Uses non-standard port
 number for HTTP       \n' +
     ' 2.8 URI_WPADMIN                        WordPress login/admin URI,
 possible phishing      \n' +
     ' 0.0 TO_EQ_FM_DIRECT_MX                 To == From and direct-to-MX
 '
 }
 }}}

 Emails doesn't seem to be as spacey any more (this is why
 `TVD_SPACE_RATIO_MINFP` is not being triggered), still the only worry some
 part is the `URI_WPADMIN` that triggers a big 2.8 but will be further
 analysed in #40081

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/39709#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform