Expansion Fleet - Avalon Archive

EXPANSION FLEET H.Q. => News Announcements => Topic started by: Vorak on February 12, 2006, 03:15:43 PM

Title: Important Anti-Spam Announcement!
Post by: Vorak on February 12, 2006, 03:15:43 PM
It has come to our attention that someone is using a non-existant email address of the expansionfleet.com domain name, as "return e-mail address" for sending out spam e-mails to a huge amount of people.

EXPANSION FLEET IS NOT THE ONE WHO SENT THIS E-MAIL!

We will take all legal action to stop this abuse as soon as possible. The following are details about the actual sent email:

Return-Path: <info@expansionfleet.com>
Received: (qmail 31383 invoked from network); 13 Feb 2006 00:05:47 +0900
Received: from unknown (HELO sv204.lolipop.jp) (127.0.0.1)
 by 0 with SMTP; 13 Feb 2006 00:05:47 +0900
Received: from 222.186.138.17 (222.186.138.17)
by sv204.lolipop.jp (LOLIPOP-Fsecure);
Mon, 13 Feb 2006 00:05:44 +0900 (JST)
X-Spam-Status: Yes(LOLIPOP-Fsecure) with VIRUSGW/SPAM_LIST/ADVERTISEMENT/1/SUBJECT
Received: from localhost (helo=localhost.localdomain)
       by incredible-mail.com with SMTP id J87Gz016500541;
       Sun, 12 Feb 2006 15:12:55 +0000
Message-Id: <SqeIYV.gjs4is@phpsender>
Date: Sun, 12 Feb 2006 15:12:55 +0000
Subject: What is VIAGRA+CIALIS Powerpack?
From: "Bob" <info@expansionfleet.com>
To: info@akaperaclub.com
X-Mailer: JUST MAILER v1.22
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
Title: Important Anti-Spam Announcement!
Post by: Montrell on February 12, 2006, 03:36:40 PM
Didn't this "Bob" visit the chatroom, some time ago. He entered, talked to some persons privately and then left. The talks he started weren't that friendly, but as he only responded 3 or 4 times I don't know if it was one of our "real" members or maybe, cliche I know, Knight/other person with hostile intentions.

There is also a character registered with the name Bob, he posted once or twice but then left.
Title: Important Anti-Spam Announcement!
Post by: Vorak on February 14, 2006, 05:22:57 PM
I doubt this has any relation with a person named "Bob" that was registered on Expansion, or with Knight.

Their intention is probably not to attack Expansion Fleet, but to just use an existing e-mail address that's not their own, to use to make it appears thats where those emails come from.

Spammers get paid for every email they send, so they try to send tons and tons of them, but don't want to bear the responsibility for breaking certain spam laws, and thereby try to avoid it this way.

It's not the first time that I receive email at info@expansionfleet.com, because though that address doesn't exist, all email sent to it or other email addresses of Expansion Fleet is directed to me. Spammers simply assume that this email address will likely work, and start sending spam to it. Another one is sales @expansionfleet.com, also nonexistant but still being spammed.

Only that this time, they went a step further to write that email address in the "From" field when sending mass spam emails. But I'm working on the case as it is.