#Insert South Park Warning Here!

This page should probably not be viewed by anyone

It started on Oct 13, with this message. I duly reported the spam to the appropritate parties. If you decode the MIME attachment, I guess that's the spammer's picture.

From admin@kievonline.org Mon Oct 13 22:07:26 2003
Return-Path: <cxxxxxx@gandalf.apogeetelecom.com>
Received: from gandalf.apogeetelecom.com ([unix socket])
by gandalf.apogeetelecom.com (Cyrus v2.0.17); Mon, 13 Oct 2003 22:07:26 -0500
X-Sieve: cmu-sieve 2.0
Return-Path: <admin@kievonline.org>
Received: from 50C55E19.flatrate.dk (50C55E19.flatrate.dk [80.197.94.25] (may be forged))
by gandalf.apogeetelecom.com (8.12.9/8.12.9) with SMTP id h9E37MAZ099169
for <cxxxxxx@gizmopartners.com>; Mon, 13 Oct 2003 22:07:23 -0500 (CDT)
(envelope-from admin@kievonline.org)
Message-ID: <001301c391cf$e8bcf020$0200a8c0@MOHA>
Reply-To: "Moshe Koldny" <admin@kievonline.org>
From: "Moshe Koldny" <admin@kievonline.org>
To: "Chris Boyd" <cxxxxxx@gizmopartners.com>
Subject: Please Support Me
Date: Mon, 13 Oct 2003 23:21:04 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000F_01C391E0.AC22A7C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Status: No, hits=0.8 required=5.0
tests=BAYES_30,EXTRA_MPART_TYPE,HTML_40_50,HTML_IMAGE_ONLY_10
version=2.55
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)



 
Hi I am running a small website, Please come visit me and click on my sponsors, this way I will be able to pay my ISP bills.
 
the site is here.
 
http ://www.kievonline.org/
 
please be patient as the site is only 1 week old and we need money to pay for it
 
we do have a nice forum though
 
http ://www.kievonline.org/forum/
 
Thanks allot


------=_NextPart_000_000F_01C391E0.AC22A7C0
Content-Type: image/jpeg;
name="vba3221.jpg"
Content-Transfer-Encoding: base64
Content-ID: <000e01c391cf$e899d7c0$0200a8c0@MOHA>
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------=_NextPart_000_000F_01C391E0.AC22A7C0--

A few hours later I get this. The IP range seems familiar. Turns out that it's in Houston. Send a query off to Mindspring asking them to confirm that someone in Houston sent it so that I can pursue them in court.

From admin@kievonline.org Tue Oct 14 00:40:53 2003
Return-Path: <cxxxxxx@gandalf.apogeetelecom.com>
Received: from gandalf.apogeetelecom.com ([unix socket])
by gandalf.apogeetelecom.com (Cyrus v2.0.17); Tue, 14 Oct 2003 00:40:53 -0500
X-Sieve: cmu-sieve 2.0
Return-Path: <admin@kievonline.org>
Received: from user-0cetm97.cable.mindspring.com (user-0cetm97.cable.mindspring.com [24.238.217.39])
by gandalf.apogeetelecom.com (8.12.9/8.12.9) with SMTP id h9E5eaAZ099739
for <cxxxxxx@gizmopartners.com>; Tue, 14 Oct 2003 00:40:42 -0500 (CDT)
(envelope-from admin@kievonline.org)
Message-ID: <000d01c39214$c9efe810$0200a8c0@MOHA>
Reply-To: <admin@kievonline.org>
From: <admin@kievonline.org>
To: "Chris Boyd" <cxxxxxx@gizmopartners.com>
Subject: thank you
Date: Tue, 14 Oct 2003 07:34:07 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_000A_01C39225.8D4F8530"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Status: No, hits=0.9 required=5.0
tests=BAYES_30,HTML_40_50,NO_REAL_NAME
version=2.55
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)


You are a piss head for hacking my site and informing my isp !!! Fuck you nigger.
 
if your a man you should come here and tell me in my face
A man needs to make a living you know, Now you think my isp is going to do something to stop me ?
 
FUCK YOU
 
Nice try. I have added your email address to every fucking spam list I can find
 
Next time youll fuck with the right person
 

Now I get this. Gee, I guess that we've made up?

Return-Path: <cxxxxxx@gandalf.apogeetelecom.com>
Received: from gandalf.apogeetelecom.com ([unix socket])
by gandalf.apogeetelecom.com (Cyrus v2.0.17); Wed, 15 Oct 2003 04:12:11 -0500
X-Sieve: cmu-sieve 2.0
Return-Path: <ma@kievonline.org>
Received: from CYBER-CENTRE ([203.86.188.34])
by gandalf.apogeetelecom.com (8.12.9/8.12.9) with SMTP id h9F9C5AZ008003
for <cxxxxxx@gizmopartners.com>; Wed, 15 Oct 2003 04:12:08 -0500 (CDT)
(envelope-from ma@kievonline.org)
Message-ID: <000801c392f2$bc4e39d0$0200a8c0@MOHA>
Reply-To: "Moshe A" <ma@kievonline.org>
From: "Moshe A" <ma@kievonline.org>
To: "Chris Boyd" <cxxxxxx@gizmopartners.com>
Subject: change of address
Date: Wed, 15 Oct 2003 10:02:52 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01C39303.7F474CF0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Status: No, hits=0.1 required=5.0
tests=HTML_60_70
version=2.55
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)



Thank you for writing me I have changed my address to ma@kievonline.org
 
thank you for your time
Moshe A

Guess the name changed too. Know anyone in Brooklyn that could pay this address a visit?

Return-Path: <cxxxxxx@gandalf.apogeetelecom.com>
Received: from gandalf.apogeetelecom.com ([unix socket])
by gandalf.apogeetelecom.com (Cyrus v2.0.17); Wed, 15 Oct 2003 11:07:01 -0500
X-Sieve: cmu-sieve 2.0
Return-Path: <lidaam@hotmail.com>
Received: from CS1 ([64.214.207.22])
by gandalf.apogeetelecom.com (8.12.9/8.12.9) with SMTP id h9FG6wAZ009959
for <cxxxxxx@gizmopartners.com>; Wed, 15 Oct 2003 11:06:59 -0500 (CDT)
(envelope-from lidaam@hotmail.com)
Message-ID: <001201c3931f$4dc9b5c0$0200a8c0@MOHA>
From: "Moshe Kolodny" <lidaam@hotmail.com>
To: "Chris Boyd" <cxxxxxx@gizmopartners.com>
Subject: Ok I hope its right this time
Date: Wed, 15 Oct 2003 15:21:54 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_000F_01C39330.10D825A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Status: No, hits=-0.5 required=5.0
tests=BAYES_30,HTML_70_80,HTML_TAG_EXISTS_TBODY
version=2.55
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)


Ok I got it right this time !!!
Please join my forum here !!!!
 
http ://kievschool128.home.icq.com/
 
and the message board here
http ://web.icq.com/groups/group_details?gid=12002773
 
We are going to hold a competition soon for $1000 so join now and you could win !!!!!
 
Moshe Kolodny

5808 – 21st Avenue | Brooklyn, NY 11204
Home 718 259-6768 | Cell 917 662-5097

Don't hear anything from him for a while, then I get more email from him in the wee hours saying that he's got several GB of kid pr0n on his server. So I look up the colo provider's NOC number and give them a call, relate the story so far to them. Within a few minutes, the name no longer resolves. Next I send the Feds in NYC an email with the story. Never heard from the dude since.