Only a few moments ago, we learned through further investigation on our Gmail account, that the email was sent by PhantomBurn, formerly the administrator and creator of a MapleStory Private Server called HelixStory, using a email masking script on his website, HelixStory.net. The proof is below:

Delivered-To: maplenewsnetwork@gmail.com
Received: by 10.86.93.5 with SMTP id q5cs251099fgb;
Sat, 13 Dec 2008 17:13:53 -0800 (PST)
Received: by 10.151.39.2 with SMTP id r2mr2610423ybj.111.1229217232163;
Sat, 13 Dec 2008 17:13:52 -0800 (PST)
Return-Path:
Received: from sh145.surpasshosting.com (sh145.surpasshosting.com [72.29.80.235])
by mx.google.com with ESMTP id 6si580485yxg.3.2008.12.13.17.13.51;
Sat, 13 Dec 2008 17:13:51 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning lkorn@nexon.net does not designate 72.29.80.235 as permitted sender) client-ip=72.29.80.235;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning lkorn@nexon.net does not designate 72.29.80.235 as permitted sender) smtp.mail=lkorn@nexon.net
Received: from helixsto by sh145.surpasshosting.com with local (Exim 4.69)
(envelope-from )
id 1LBfYB-0005VL-V1
for maplenewsnetwork@gmail.com; Sat, 13 Dec 2008 20:13:40 -0500
To: maplenewsnetwork@gmail.com
Subject: DMCA Notice www.maple-news.com
Delivered-To: maplenewsnetwork@gmail.com
Reply-To: Lloyd Korn
Received: from lkorn.nexon.net (lkorn.nexon.net [63.251.217.130]) by mx.google.com with SMTP id x56si6475345pyg.2007.03.02.21.26.27; Sat, 13 Dec 2008 14:57:32 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of lkorn@nexon.net designates 63.251.217.130 as permitted sender)
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of maplestory@nexon.net designates 63.251.217.130 as permitted sender) smtp.mail=maplestory@nexon.net
Received: from lkorn@nexon.net by nexon.net with local (Exim 4.69) (envelope-from ) id 1LBdQH-0000X0-30 for maplenewsnetwork@gmail.com; Sat, 13 Dec 2008 17:57:21 -0500
From: Lloyd Korn
Message-Id: <082201c75d54$7d4701b0$97d9fb3f@nxam.com>
X-AntiAbuse: Primary Hostname – sh145.nexon.net
X-AntiAbuse: Original Domain – nexon.net
X-AntiAbuse: Sender Address Domain – sh145.nexon.net
X-Source-Args: /usr/bin/php /home/maplesto/public_html/index.asp
X-Source-Dir: nexon.net:/public_html/index.asp
Date: Sat, 13 Dec 2008 20:13:39 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – sh145.surpasshosting.com
X-AntiAbuse: Original Domain – gmail.com
X-AntiAbuse: Originator/Caller UID/GID – [32102 32003] / [47 12]
X-AntiAbuse: Sender Address Domain – nexon.net
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/helixsto/public_html/fake-email/mailed.php
X-Source-Dir: helixstory.net:/public_html/fake-email

The email was sent by “http://helixstory.net/fake-email” using a pre-made form. Not only is what PhantomBurn did extremely illegal, it also caused unnecessary hype and distress in the MapleStory community. Maple-News is EXTREMELY sorry for what has happened here. Although we are relieved that NEXON did not send the DMCA, we are very angry and disappointed that someone would go so far just to try and shut down our site.

The reprocussions of this script could hav been devastating. It could have been used to make NEXON appear “lawsuit crazy.” We would like to apologize to NEXON America for what has happened here. We hope that they will take appropriate action to make known the possibility of fake DMCA notices as well as this script.

I hope that we can move on from this horrible incident. I am still in shock about what happened here and I cannot believe someone went this far. The fake DMCA notice was unncessary and just plain disgusting.