Your forms are now being used in spam emails. How do you plan on stopping this?

  • Profile Image
    Michael (Spacequad AntiSpam Services)
    Asked on January 07, 2012 at 02:23 PM

    Our users have received several of these in their email inboxes.  If this continues to be a problem, we will place your domain on all the major blacklists.

     

    Michael

    Spacequad AntiSpam Services

    support@spacequad.com

    ----------------------------

     

    Received: from node4.spacequad.com [192.168.0.250] by node4.spacequad.com with ESMTP
      (SMTPD32-7.07) id AD5FF0612; Sat, 07 Jan 2012 11:05:51 -0500
    Received: from 201.18.173.201 by node4.spacequad.com (Spacequad Internet Services - When reporting spam, please include this header and send reports in English, to abuse@spacequad.com.  All SPAM emails are automatically deleted and never delivered to user inboxes.  If you feel you emails have been unjustly deleted without cause, then contact us through our website at http://www.spacequad.net); Sat, 7 Jan 2012 11:05:51 -0500
    Received: from User (unknown [180.215.145.46])
        by mail.joaopessoa.pb.gov.br (Postfix) with ESMTPA id 90D456C861;
        Sat,  7 Jan 2012 12:56:02 -0300 (BRT)
    From: "Admin"<andy.cairns1@btinternet.com>
    Subject: {Spam?} Update Your Account
    Date: Sat, 7 Jan 2012 21:26:16 +0530
    MIME-Version: 1.0
    Content-Type: text/html;
        charset="Windows-1251"
    Content-Transfer-Encoding: 7bit
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
    X-PMJP-MailScanner-ID: 90D456C861.AA347
    X-PMJP-MailScanner: Found to be clean
    X-PMJP-MailScanner-SpamCheck: spam, SpamAssassin (cached, escore=8.151,
        requerido 6, ALL_TRUSTED -1.00, BAYES_50 0.80,
        FORGED_MUA_OUTLOOK 1.93, FORGED_OUTLOOK_HTML 0.02,
        FORGED_OUTLOOK_TAGS 0.05, FROM_MISSP_MSFT 1.00, HTML_MESSAGE 0.00,
        MIME_HTML_ONLY 0.72, MISSING_HEADERS 1.02, MISSING_MID 0.50,
        TVD_PH_SUBJ_ACCOUNTS_POST 3.10, T_FROM_MISSPACED 0.01)
    X-PMJP-MailScanner-SpamScore: ssssssss
    X-PMJP-MailScanner-From: andy.cairns1@btinternet.com
    X-Spam-Status: Yes
    X-Server: LogSat Software SMTP Server
    X-SF-RX-Return-Path: <andy.cairns1@btinternet.com>
    X-SF-HELO-Domain: mail.joaopessoa.pb.gov.br
    X-SF-Originating-IP: 201.18.173.201
    Message-Id: <201201071105816.SM01088@node4.spacequad.com>
    X-RCPT-TO: <support@spacequad.com>
    Status: U
    X-UIDL: 611028603

    <HTML><HEAD><TITLE></TITLE>
    </HEAD>
    <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
    <FONT size=2 color=#000000 face="Arial">
    <DIV>
    Your mailbox has exceeded the storage limit which is 20 GB as set by your administrator,you are currently running on 20.9 GB,you may not be able to send or receive new mail until you re-validate your mailbox.To re-validate your mailbox please <A target="_blank" href="http://www.jotform.com/form/20061544337"><FONT color=#0000FF><B><U>CLICK </B></U></FONT></A><A target="_blank" href="http://" rel="nofollow noopener"><FONT color=#0000FF><B><U>HERE</B></U></FONT></A><B> </B></DIV>
    </FONT>
    <br />--
    <br />Esta mensagem foi verificada pelo sistema de antivírus e
    <br /> acredita-se estar livre de perigo.
    </BODY></HTML>

  • Profile Image
    liyam
    Answered on January 07, 2012 at 02:41 PM

    Thank you for reporting.  The email did not come from our servers.  Although the URL of the form in the content does show that it is hosted here in JotForm.

    The form in the link you have provided has already been suspended.  Feel free to report to us forms hosted here in Jotform that are used for phishing / spamming as we have strict policies regarding these.

     

  • Profile Image
    liyam
    Answered on January 07, 2012 at 02:46 PM

    In addition to this, we are very proactive about phishing in our site. All of the forms are reviewed by our bayesian phishing detecting system and 99% of phishing forms are suspended automatically without ever seeing a daylight. 

  • Profile Image
    Michael (Spacequad AntiSpam Services)
    Answered on January 07, 2012 at 02:48 PM

    Please send us an email confirmation and how we can contact you directly instead of thru this forum for further reports.

     

    Michael

  • Profile Image
    idarktech
    Answered on January 07, 2012 at 06:33 PM

    Hi Michael,

    Thank you so much for asking. You can also contact us directly at jotformsupport[at]gmail[dot]com.

    Thanks for your cooperation with us.