What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    Possible Phishing?

    Asked by Eboni  on June 26, 2017 at 07:12 PM

    Hello! Just want to know if I ever had an account with you? My email is Realedazed@gmail.com.

    I'm asking because my spambox if filled will emails from noreply@jotform.com.  Last time this happened I was told to forward the email or the header. I included it below since I couldn't attach a .txt

     

    Thanks,

    Eboni

     

     

     

     

    Delivered-To: realedazed@gmail.com Received: by 10.107.24.197 with SMTP id 188csp569876ioy; Tue, 20 Jun 2017 16:35:00 -0700 (PDT) X-Received: by 10.36.65.23 with SMTP id x23mr6028796ita.2.1498001700093; Tue, 20 Jun 2017 16:35:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498001700; cv=none; d=google.com; s=arc-20160816; b=DzdAGcIgxZQrwdIJ03NpwjTGUqdCr5dd8Akd2/pwTu0XHzufSb3BnD53f+CeG5gODz lxu+9WbnK4gc/1eFmWGAvVWLBL9drbHTpB7ByqflKcNuTnYa9cXjA8qx/IiU6w6al8ei UuYIXYa2Eb+bwGVTFmYni/NAqIlXTAZsZB52R1oUODQQME9ta6ANqX+QqiYsBQmnJ1wN 1Vhgi+m1svJsRp4YYkeVaawYaKwQbdKkQqTNV/JkPalbdd6QEdXaV7chwivuxefNRBKi v3eRLiOqoGYGd2Oa1g/pu3SMgC3pLdIgBbvHEPDP+e9kXmJjOvk83xCw+XPvqRtzEzPj CCgg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:reply-to:from :date:subject:to:dkim-signature:delivered-to:subject:reply-to :reply-to:reply-to:reply-to:arc-authentication-results; bh=lZBKB2oducVCUiWT5nRP1x5jwPbdYyST25ZYpdeLTIc=; b=EhWDOlk8xXCDB8EcaMbMnBpSmRjbU4fEuHp5GIMWPND+CcvEIrehfVTDKwnrWjdsrg GRZ3hm5d5ixdPagnN7k2JiQnNSBrUiJDFaxmQaFD7EUfd2EKIfXibHNVg+pfazR6nzOe i4KkoDDS/qJCPSFbq/kpbGBUrRqVo4nvIbtR5JEbXIcOjfmYXNX5qVY7wz7NpTOUAaES pYo+hBCa5jpXLeA/oWaDtWqevxeQ8VV44Idgw2LNkr1rYJSGKhKLrvTjL5gP78IybgON iZFonS6x7RTXrydj1+/2ofUHhwixh+Io3LEk5IuWwVTCY9af0h4/Mwl/Mf29j4IuGCRc u8IQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@jotform.com header.b=djNRDKej; spf=pass (google.com: domain of 8goe6jxz@rentmen.com designates 74.208.12.152 as permitted sender) smtp.mailfrom=8goe6jXZ@rentmen.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=jotform.com Return-Path: <8goe6jXZ@rentmen.com> Received: from ec2-34-196-236-240.compute-1.amazonaws.com (electr-on.skilledlight.net. [74.208.12.152]) by mx.google.com with ESMTPS id x187si134513iof.149.2017.06.20.16.34.59 for <realedazed@gmail.com> (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 20 Jun 2017 16:35:00 -0700 (PDT) Received-SPF: pass (google.com: domain of 8goe6jxz@rentmen.com designates 74.208.12.152 as permitted sender) client-ip=74.208.12.152; Authentication-Results: mx.google.com; dkim=pass header.i=@jotform.com header.b=djNRDKej; spf=pass (google.com: domain of 8goe6jxz@rentmen.com designates 74.208.12.152 as permitted sender) smtp.mailfrom=8goe6jXZ@rentmen.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=jotform.com Reply-To: reply@abouthyper.net Reply-To: admin@talkdetails.com Reply-To: reply@fosterfree.com Reply-To: reply@radiustree.net Subject: Dear realedazed Your password has been changed! Return-Path: <noreply@jotform.com> X-Original-To: fletcher8@lkim1wlvpl.com Delivered-To: catchall@lkim1wlvpl.com Received: from pool29.formresponse.com (pool29.formresponse.com [152.160.219.181]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by post.lkim1wlvpl.com (Postfix) with ESMTPS id 78F35400A9 for <fletcher8@lkim1wlvpl.com>; Tue, 20 Jun 2017 05:38:44 -0700 (PDT) Received: from go-app3 (pool29.formresponse.com [152.160.219.181]) by pool29.formresponse.com (Postfix) with ESMTP id 8CDF11960B39 for <fletcher8@lkim1wlvpl.com>; Tue, 20 Jun 2017 08:38:44 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=jotform.com; s=mail; t=1497962324; bh=lZBKB2oducVCUiWT5nRP1x5jwPbdYyST25ZYpdeLTIc=; h=To:Subject:Date:From:Reply-To:From; b=djNRDKejYklZnBxCsvoHW7p4LUydcqypYu3sM4yqdmpJTFp+UT+Hgzpw3DIFVVgb0 z4633Y6aUj4ymjcZrjltcSh4LWQz+Lut0l1rw/uctFpL+V20hyS1XAU1L7MPvwYO5X 2dNQ3bgdzZOkaCJIJDkfqzHbhX06rsZrX/KQQ78w= Received: by go-app3 (Postfix, from userid 0) id 6D8A6BE116; Tue, 20 Jun 2017 08:38:44 -0400 (EDT) To: fletcher8@lkim1wlvpl.com Subject: (TEST) Re: password1 Date: Tue, 20 Jun 2017 08:38:44 -0400 From: JotForm <noreply@jotform.com> Reply-To: JotForm <noreply@jotform.com> Message-ID: <10fc10489d94bffec60ad1f8ec2e5cf6@localhost.localdomain> X-Priority: 3 X-Related: JotForm User Emails MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/html; charset="utf-8"<p>Hi,<br /><br /></p> <table> <tbody> <tr> <td style="border: 1px solid #dddddd;">&nbsp;</td> </tr> <tr> <td style="border: 1px solid #dddddd;">Your password was reset using the email address <strong style="font-weight: bold;"><a target="_blank" href="mailto:reply@abouthyper.net" rel="noopener noreferrer">reply@abouthyper.net</a>&nbsp; </strong>on Monday June 19, 2017 at 05:50am.<br /><br /></td> </tr> <tr> <td style="border: 1px solid #dddddd;"><br /> <table style="border: 0px none; border-collapse: collapse;"> <tbody> <tr> <td style="border: 1px solid #dddddd;">Operating system:&nbsp;</td> <td style="border: 1px solid #dddddd;">Windows</td> </tr> <tr> <td style="border: 1px solid #dddddd;">Browser:&nbsp;</td> <td style="border: 1px solid #dddddd;">Chrome</td> </tr> <tr> <td style="border: 1px solid #dddddd;">IP address: &nbsp; &nbsp; &nbsp; &nbsp;74.204.10.15</td> </tr> <tr> <td style="border: 1px solid #dddddd;">Estimated location: &nbsp;</td> <td style="border: 1px solid #dddddd;">Brandenburgische Str 14, 55278 Hahnheim <strong style="font-weight: bold;">Germany</strong></td> </tr> </tbody> </table> </td> </tr> <tr> <td style="border: 1px solid #dddddd;"><strong style="font-weight: bold;"><br /><br /><br /><br />If you did this,</strong> you can safely disregard this email.&nbsp;</td> </tr> <tr> <td style="border: 1px solid #dddddd;"><strong style="font-weight: bold;">If you didn't do this,</strong> please <a target="_blank" href="mailto:reply@abouthyper.net?cc=admin@talkdetails.com,reply@fosterfree.com,reply@radiustree.net&amp;subject=Password%20Changed%21%20-%20.&amp;body=I%20Confirm%20My%20Adress">contact us by replying to this email for more informations</a></td> </tr> <tr> <td style="border: 1px solid #dddddd;"><br /><br />Thanks,<br />Security Team</td> </tr> </tbody> </table>
  • Profile Image
    JotForm Support Manager

    Answered by Jeanette on June 26, 2017 at 10:26 PM

    Thank you for contacting us, there is in fact a spammer or group of spammers, sending emails impersonating our company, please disregard the message, and do not click on any link.