emails blocked as SPAM (phising)

[deanflan]

Hello,

Our emails are getting blocked as SPAM (phising) because the URL in the emails contain caspio.com. When we replace caspio.com with the IP address then it works. However, then google blocks the email. Not to mention using the IP address is probaly not a good solution. I tried out point a DNS record from our domain to that address and use that in the email, but then it does not work for form submission. We can probably use the AWS cname record that our b6.caspio.com points to, but that URL is pretty long. Any other suggestions? I think Caspio should work to get off the phising SPAM list as well, here is the output from our SPAM firewall:

X-Barracuda-BRTS-URL-Found: caspio.com (*Phishing.Email)

I do not want to whitelist it, as that solves our problem, but not those of other potential users.

Thanks!

Dean

[nkamalan]

Hello,

Caspio has requested whitelisting from Barracuda but we are not sure if and when they will do it. In the meantime, it is up to the administrator of the Barracuda appliance to whitelist caspio.com if they want. The reason that they are considering us suspicious is “Link tracking is considered suspicious in nature and can be flagged as suspect in the event of malicious urls that are published, that we may pick up in our systems.” (from barracuda Support)

Regards,

NKamalan

[nkamalan]

They have white-listed Caspio, but some networks might take 24~48 hours to update their lists.

[nedmat]

Hello,

I am still experiencing problems with Gmail's Spam filter. All automatically generated emails are going to the Inbox except for the acknowledgement email generated by the Approve New Ad app. The link to the update ad page

http://b6.caspio.com/dp.asp?AppKey=57FC ... 8879&GUID=

seems to be triggering Gmail's spam filter...

Any ideas?

Thanks!

[nedmat]

Bounce

[c4spioheartsphishing]

This will keep happening.

Caspio allows no-hold-barred free trials and that invites miscreants to setup forms used for "phishing". We just had our entire userbase hit with an idiotic "fill this form to prevent your account from being locked" phish which through a redirect landed here:

https://b4.caspio.com/dp.asp?AppKey=261 ... c744019f3f

Caspio has no abuse@ or noc@ contacts for victims to report this abuse of their service, which in this day and age tells me they are new to the internets - it's just bad form to offer an easily abused service and not allow ISPs and other technical contacts to reach a 24/7 reporting mailbox.

I will certainly be doing my best to ensure they are on as many URL blacklists as possible until I hear that they are either responding to abuse reports or setting up the free trial so that's it's less trivial to abuse.

[bahar_vm]

Caspio has "Report Abuse" on all Trial accounts and forms. See the attachment for reference.

Best,

Bahar M.

[c4spioheartsphishing]

I think you should re-examine "ALL". The form I linked did not. I suspect the people abusing your service might be hiding that under a div, setting the font color to white, or some other trickery.

The fact remains that your website has NO abuse contact and you have no functioning "abuse@" email address.

Maybe you guys are new to this internet thing, but going back over a decade, it's been common practice (and courtesy) to provide an abuse contact, and to do that in an industry-standard way (ie: the "abuse@domain.com" contact).

I'll also note that some people that run constantly-abused form services like this actually have a way to report phishing or similar in real-time and will process removals if the sender has verified they are the phish victim or if evidence is provided that shows beyond a doubt that the form is being used for phishing...

No one can force caspio to do that, but if you'd rather make enemies with ISPs rather than friends, that's up to you.

[bahar_vm]

Thank you for your feedback; we hear you and appreciate your concerns. The abuse link is available during trial in all type of web forms. The link shouldn't be easy to remove or hide using styles as our system detects and replaces another one. Maybe in the case you're reporting the account was a paid one! In that case we don't expect abusing the system but still the complaint could be reported to Caspio's abuse email contact (abuse at caspio.com). I'm sorry for the inconvenience this has caused you.

Best,

Bahar M.

[bahar_vm]

Please also report any abuse using the Contact us page http://www.caspio.com/company/contact.aspx.

[balmerhevi]

Check thiso ne to know more about...phishing

Balmer

 

[Mathilda]

On 12/25/2016 at 10:20 AM, Emma1410 said:

and i am still facing this issue in 2016 as well. everything goes into SPAM.

Hi,

you may find troubleshooting steps here