CCP14 Homepage - Single Crystal and Powder Diffraction - CCP14 Administration Information - SPAM E-mail supposedly Originating from the CCP14.ac.uk domain - (Plus some hints for people wanting to know where a SPAM mail originates from by reading the Received: header)

[CCP14 Home: (Frames \| No Frames)] CCP14 Mirrors: [UK] \| [CA] \| [US] \| [AU]	What's New	Introduction	Site Map
Search the CCP14	Download Programs What do you want to do? (lists of software by crystallographic method)	Tutorials	Solutions

(This Webpage Page in No Frames Mode)

Collaborative Computational Project Number 14

for Single Crystal and Powder Diffraction

CCP14

SPAM E-mail supposedly Originating from the CCP14.ac.uk domain

(Plus some hints for people wanting to know where a SPAM mail originates from by reading the Received: header)

(Updated 30th December 2000)

The CCP14 Homepage is at http://www.ccp14.ac.uk

[Back to CCP14 Web/Config Main Page] | [Back to CCP14 Web/Config Misc Things] | [CCP14 feels the Wrath of Dr Oblivious]

Summary: The CCP14 servers are not generating or relaying SPAM E-mail/Junk E-mail, though fake From: and To: headers may give that impression. Check the Received: fields to see the "source" and "route" the SPAM mail has actally taken.

30th December 2000

"Deck the halls with boughs of SPAM": After facing the wrath and fury of Dr Oblivious and his bouncing SPAM of terror: update "this" page on SPAM E-mail supposedly Originating from the CCP14.ac.uk domain. If you have received SPAM Emails supposedly originating from the CCP14.ac.uk domain - apologies but these are forged and do not originate from the CCP14 domain. Information is provided below on how to interpret where these Emails are actually originating from. There is no need to use the offending SPAM to bounce attack the CCP14 mailbox. We are happy to get a "single" copies of the offending SPAM E-mail so we can try and help trace the misbehaving ("relaying") E-mail servers and put them out of action.

The Problem

There have been complaint(s) by frustrated SPAM E-mail/Junk E-mail recipients that the CCP14.ac.uk servers (and users on these servers) have been sending out SPAM E-mails to all corners of the world (definitely multiple copies to those annoyed enough about it to pursue the problem).

These SPAM messages are not benign to the CCP14 project. As well as giving the mistaken impression to a wide variety of people that the CCP14 project also promotes "get rich quick schemes", the enormous amount of "return" (forged) E-mails has forced messages sent to the ccp14@ccp14.ac.uk mail address to be dropped. This means these SPAM messages have effectively become a denial of service attack against the CCP14 mail server. (As a short term alternative, send query messages to ccp14@dl.ac.uk or l.cranswick@dl.ac.uk)

Diagnosis

Not possible to do SPAM Relaying from CCP14 computers

As a security precaution, the main CCP14 Web and FTP server does not run SMTP in "deamon" mode so cannot receive and/or relay Email. The servers that do handle the CCP14's E-mail are configured to not allow any type of SPAM relaying.

Examining the offending SPAM E-mails

The following table gives an example of an offending SPAM Email. While the From: and To: fields have a garbage user name (but an exisiting domain - ccp14.ac.uk) - these are faked and irrelevant to where the SPAM Email originated from. Examining the Received: and Delivered-To: fields will reveal the originating server this, and the route it took to be delivered to its victim.

Actions you can take

If you do wish to pursue and report a SPAM E-mail to what looks like the originating Internet domain, make sure to include the offending SPAM Email with ALL the headers so that it can be correctly diagnosed. In E-mail packages such as Eudora, you may have to hit the appropriately named "Blah, Blah, Blah" icon to bring up the Email headers.

Could you also report this to the CCP14

Example of SPAM Mail with Faked CCP14.ac.uk origin

Date:    7/23/00 12:58 PM
From:    ann41_25@ccp14.ac.uk
To:      ann41_25@ccp14.ac.uk
Copy:    
Subject: Make $50K or more in 90 days!!

Return-path: [ann41_25@ccp14.ac.uk]
Received: from server5.hypermart.net (unverified [206.253.222.75]) by cvc6.cvc.net 
   (Rockliffe SMTPRA 3.4.5) with SMTP id  for 
   [ozzman@cvc.net]; Sun, 23 Jul 2000 12:58:45 -0700
Received: (qmail 28530 invoked by alias); 23 Jul 2000 20:00:17 -0000
Delivered-To: alias-hmv-r@coastdesign.com
Received: (qmail 28522 invoked from network); 23 Jul 2000 20:00:16 -0000
Received: from frontpage.netgates.co.uk (194.105.64.186)  by 
   server5.hypermart.net with SMTP; 23 Jul 2000 20:00:16 -0000
Received: from monorailpc (host-216-77-220-193.fll.bellsouth.net [216.77.220.193])
   by frontpage.netgates.co.uk (8.8.8/8.8.8) with SMTP id UAA03019;	
   Sun, 23 Jul 2000 20:55:26 +0100 (BST)   (envelope-from ann41_25@ccp14.ac.uk)
Date: Sun, 23 Jul 2000 20:55:26 +0100 (BST)
From: ann41_25@ccp14.ac.uk
Message-Id: [200007231955.UAA03019@frontpage.netgates.co.uk]
To: ann41_25@ccp14.ac.uk
Subject: Make $50K or more in 90 days!!
MIME-Version: 1.0
Content-Type: text/plain; charset=unknown-8bit



Dear Friend,

Thank you for your time and interest.

This email contains the ENTIRE PLAN of how YOU can make $50,000 or

more in the next 90 days simply sending email!

[Text Deleted]

Another example of SPAM Mail with Faked CCP14.ac.uk origin

Date:    7/23/00 12:58 PM
From:    lkelly@ccp14.ac.uk
To:      lkelly@ccp14.ac.uk
Return-Path: [lkelly@ccp14.ac.uk]
Received: (from daemon@localhost)
	by aix10.segi.ulg.ac.be (8.9.1a/8.9.1a) id EAA26300
	for u003031@mailst.ulg.ac.be; Tue, 29 Aug 2000 04:53:57 +0200
From: lkelly@ccp14.ac.uk
Received: from iclweb02.icl.nl (systemservice.icl.nl [193.79.144.72] (may
be forged))
	by aix10.segi.ulg.ac.be (8.9.1a/8.9.1a) with ESMTP id EAA25962
	for [xxxxxxxxxx@ulg.ac.be]; Tue, 29 Aug 2000 04:53:56 +0200
X-PH: V4.4@aix10.segi.ulg.ac.be
Received: from goldstar ([216.77.209.143]) by iclweb02.icl.nl  with
Microsoft SMTPSVC(5.5.1877.977.9);
	 Tue, 29 Aug 2000 04:41:16 +0200
To: lkelly@ccp14.ac.uk
Subject: The Simplest way to Earn $50,000 in 90 days
MIME-Version: 1.0
Content-Type: text/plain; charset=unknown-8bit
Message-ID: [0e2f91641021d80ICLWEB02@iclweb02.icl.nl]
Date: 29 Aug 2000 04:41:33 +0200
X-UIDL: e3e96531487a62a6f0dbfbbb9aeef97c
Status: RO

Another example of SPAM Mail with Faked CCP14.ac.uk origin


>Return-Path: [HerbalV@ccp14.ac.uk]
>Delivered-To: bfotk@mailhub.acsu.buffalo.edu
>Received: (qmail 12343 invoked from network); 24 Aug 2000 18:51:49 -0000
>Received: from mail2.acsu.buffalo.edu (128.205.7.4)
>  by mail1 with SMTP; 24 Aug 2000 18:51:49 -0000
>Received: (qmail 2587 invoked by uid 39126); 24 Aug 2000 18:51:49 -0000
>Delivered-To: xxxxx@acsu.buffalo.edu
>Received: (qmail 2543 invoked from network); 24 Aug 2000 18:51:46 -0000
>Received: from predspfpb.spb.ru (194.8.189.150)
>  by mail2 with SMTP; 24 Aug 2000 18:51:46 -0000
>Received: from view1 (host-209-214-80-221.fll.bellsouth.net [209.214.80.221])
>	by predspfpb.spb.ru (8.8.8/8.8.8) with SMTP id WAA31029;
>	Thu, 24 Aug 2000 22:44:38 +0400
>Date: Thu, 24 Aug 2000 22:44:38 +0400
>From: HerbalV@ccp14.ac.uk
>Message-Id: [200008241844.WAA31029@predspfpb.spb.ru]
>To: HerbalV@ccp14.ac.uk
>Subject: The Information You Requested
>
>
>
>" BEFORE HERBAL V IT WAS LIKE DRIVING AROUND IN A YUGO AND SUDDENLY I'M
BEHIND THE WHEEL OF A  FERRARI " 
>
>	-FRANK of Lincoln, Nebraska
>
>
>
>**********
>
>NEED TO SPICE UP YOUR SEX LIFE AND BOOST UP YOUR SEX DRIVE ?

December 30th 2000: CCP14 Feels the Wrath and Fury of Dr Oblivious

(Though possibly a cunning SPAM mailer with the mass of bounced spam mails that arrived?)

Received fields are bolded to show where the offending Emails have been inserted by SPAM friendly "relaying" SMTP Email servers

I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- kkdiisa24530@hhkuur7,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From kkdiisa24530@hhkuur7@iname.com Sun Oct 01
> 06:51:01 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <"kkdiisa24530@hhkuur7"@iname.com>
> X-YahooFilteredBulk: 168.191.177.199
> Received: from sdn-ar-002txhousP269.dialsprint.net 
> (HELO rs9.media3.net) (168.191.177.199)
>   by mta429.mail.yahoo.com with SMTP; 30 Sep 2000
> 19:50:22 -0700 (PDT)</B>
> Message-ID: [44333.15926@rs9.media3.net]
> From: kkdiisa24530@hhkuur7@iname.com





I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- xmrose99277@compuserve.com,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From xmrose99277@compuserve.com Tue Sep 26 05:57:53
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <xmrose99277@compuserve.com>
> X-YahooFilteredBulk: 194.129.210.181
> Received: from intranet.teleregion.co.uk  (HELO
> intranet-mail.teleregion.co.uk) (194.129.210.181)
>   by mta425.mail.yahoo.com with SMTP; 25 Sep 2000
> 20:37:32 -0700 (PDT)
> Received: from za.mx.aol.com ([64.10.122.40]) by
> intranet-mail.teleregion.co.uk (Lotus SMTP MTA
> v4.6.1  (569.2 2-6-1998)) with SMTP id
> 80256966.001313F0; Sat, 26 Sep 1970 04:28:26 +0100
> Message-ID: < 448553@ 577415>
> From: xmrose99277@compuserve.com
> <xmrose99277@compuserve.com>



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- cupid-link@nflrtikxr.unbounded.com wrote:
> From cupid-4-u@unbounded.com Fri Sep 29 07:02:50
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <cupid-4-u@unbounded.com>
> X-YahooFilteredBulk: 200.12.166.46
> Received: from 200.12.166.46  (HELO gis1.)
> (200.12.166.46)
>   by mta404.mail.yahoo.com with SMTP; 28 Sep 2000
> 22:17:15 -0700 (PDT)
> Received: from 36oa4ou.cupid-4-u.com by gis1.
> (SMI-8.6/SMI-SVR4)
> 	id AAA18693; Fri, 29 Sep 2000 00:03:13 -0500
> Reply-to: cupid-link@unbounded.com
> Subject:  - Are you single?- Looking for new




I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- lxMcMaey64411@geocities.com,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From lxmcmaey64411@geocities.com Fri Sep 29 20:12:03
> 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <lxmcmaey64411@geocities.com>
> X-YahooFilteredBulk: 194.243.122.227
> Received: from 194.243.122.227  (EHLO
> fototeca.iccd.beniculturali.it) (194.243.122.227)
>   by mta453.mail.yahoo.com with SMTP; 29 Sep 2000
> 13:10:14 -0700 (PDT)
> Received: from za.mx.aol.com (64.10.121.90) by
> fototeca.iccd.beniculturali.it (Worldmail 1.3.167);
> 29 Sep 2000 21:57:49 +0200
> Message-ID: < 407283@ 416559>
> From: lxMcMaey64411@geocities.com
> <lxMcMaey64411@geocities.com>
> To: Doublehappy@mail.com
> <doctorofphilosophy@yahoo.com>
> Subject: friEnd (66310)



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- Herbal-V@lm.se wrote:
> From herbal-v@lm.se Sun Oct 01 09:38:40 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <herbal-v@lm.se>
> X-YahooFilteredBulk: 195.146.114.162
> Received: from ns.telpro.cz  (EHLO www.telpro.cz)
> (195.146.114.162)
>   by mta212.mail.yahoo.com with SMTP; 30 Sep 2000
> 17:25:35 -0700 (PDT)
> Received: from ejkmail.ejk.cz (gate-2.ejk.cz
> [195.146.114.184])
> 	by www.telpro.cz (8.9.3/8.8.7) with SMTP id
> CAA21405;
> 	Sun, 1 Oct 2000 02:24:45 +0200
> Date: Sun, 1 Oct 2000 02:24:45 +0200
> From: Herbal-V@lm.se
> Message-Id: <200010010024.CAA21405@www.telpro.cz>
> Received: from 216.77.215.13 ([216.77.215.13]) by
> ejkmail.ejk.cz (WinRoute Pro 4.1) with SMTP; Sun, 1
> Oct 2000 02:00:43 +0200
> To: Herbal-V@lm.se
> Subject: The Information Which You Requested



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- kkdiisa24530@hhkuur7,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From kkdiisa24530@hhkuur7@iname.com Sun Oct 01
> 06:51:01 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <"kkdiisa24530@hhkuur7"@iname.com>
> X-YahooFilteredBulk: 168.191.177.199
> Received: from sdn-ar-002txhousP269.dialsprint.net 
> (HELO rs9.media3.net) (168.191.177.199)
>   by mta429.mail.yahoo.com with SMTP; 30 Sep 2000
> 19:50:22 -0700 (PDT)
> Message-ID: <44333.15926@rs9.media3.net>
> From: kkdiisa24530@hhkuur7@iname.com
> <kkdiisa24530@hhkuur7@iname.com>
> Reply-to: ghjjz8i@bakterius.eggenet.de
> Subject: Better Be Ready to PARTY UP If you Click
> This!



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- willam12@MauiMail.com wrote:
> From willam12@mauimail.com Thu Oct 12 03:57:29 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3002.mail.yahoo.com
> Return-Path: <willam12@mauimail.com>
> X-YahooFilteredBulk: 210.67.212.1
> Received: from 210.67.212.1  (EHLO everest.com.tw)
> (210.67.212.1)
>   by mta320.mail.yahoo.com with SMTP; 11 Oct 2000
> 20:57:19 -0700 (PDT)
> Received: from evn004a.everest.com.tw
> ([203.66.121.182]) by dns1.everest.com.tw with SMTP
> id <115283>; Thu, 12 Oct 2000 11:46:11 +0800
> Received: from 210.67.212.1 ([206.133.78.64]) by
> evn004a.everest.com.tw (Lotus SMTP MTA v1.2  (600.1
> 3-26-1998)) with SMTP id C8256976.000268EC; Thu, 12
> Oct 2000 09:26:35 +0900
> To: makemoney@abraxa.ign.fr
> Message-ID: <238874747.0098732@abraxa.ign.fr>
> Date: Sun, 1 Oct 2000 10:11:25 +0800
> From: willam12@MauiMail.com




I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- edward42@myrealbox.com wrote:
> From edward42@myrealbox.com Sun Oct 01 17:40:54 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <edward42@myrealbox.com>
> X-YahooFilteredBulk: 63.14.24.118
> Received: from 1Cust118.tnt3.manchester.nh.da.uu.net
>  (HELO localhost) (63.14.24.118)
>   by mta101.mail.yahoo.com with SMTP; 01 Oct 2000
> 10:14:45 -0700 (PDT)
> Content-Type: text/plain;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> Message-Id: <btfqqnm.vlctrdhtiq@localhost>
> From: edward42@myrealbox.com
> Date: Sun, 01 Oct 2000 13:14:08 -0500
> Subject: Work from Home! Guaranteed Minimum Monthly



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- vvsay@kali.com.cn wrote:
> From vvsay@kali.com.cn Mon Oct 02 10:27:33 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <vvsay@kali.com.cn>
> X-YahooFilteredBulk: 210.217.220.157
> Received: from 210.217.220.157  (EHLO
> mail.eccenter.org) (210.217.220.157)
>   by mta404.mail.yahoo.com with SMTP; 02 Oct 2000
> 03:27:32 -0700 (PDT)
> Received: from 163.net (1Cust139.tnt6.sea1.da.uu.net
> [63.39.180.139])
> 	by mail.eccenter.org (8.9.3/8.8.7) with SMTP id
> TAA23782;
> 	Mon, 2 Oct 2000 19:26:15 +0900
> From: vvsay@kali.com.cn
> Message-ID:
> <0000756f7c41$00002acb$000042ef@doar.net>
> To: <ab103@newmail.net>
> Subject: Go Off Shore Now



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- Znzh41g68@goplay wrote:
> From znzh41g68@goplay Tue Oct 03 18:04:08 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <znzh41g68@goplay>
> X-YahooFilteredBulk: 203.246.184.99
> Received: from mail.posdata.co.kr (203.246.184.99)
>   by mta443.mail.yahoo.com with SMTP; 03 Oct 2000
> 11:04:06 -0700 (PDT)
> Received: from gJGX7Z3Wg
> (sdn-ar-001calangP259.dialsprint.net
> [168.191.247.21])
> 	by mail.posdata.co.kr (8.8.7/8.8.7) with SMTP id
> BAA20806;
> 	Mon, 25 Sep 2000 01:08:55 +0900 (KST)
> From: Znzh41g68@goplay
> Date: 24 Sep 00 9:01:03 AM
> Message-ID: <lidgyUOrgTa3816V>
> Subject: WE DELIVER ANYWHERE IN SOUTHERN CALIFORNIA



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- 3tn0h6@4cnet.4c.com.kw wrote:
> From 3tn0h6@4cnet.4c.com.kw Thu Oct 05 03:20:06 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <3tn0h6@4cnet.4c.com.kw>
> X-YahooFilteredBulk: 194.140.128.116
> Received: from desarrollo.ceac.com (194.140.128.116)
>   by mta424.mail.yahoo.com with SMTP; 04 Oct 2000
> 20:18:59 -0700 (PDT)
> Received: from grupoceac.ceac.com
> ([194.140.128.113])
> 	by desarrollo.ceac.com (8.8.8+Sun/8.8.8) with ESMTP
> id FAA01604;
> 	Thu, 5 Oct 2000 05:03:27 +0200 (MET DST)
> From: 3tn0h6@4cnet.4c.com.kw
> Received: from mindspring
> (pool0212.cvx10-bradley.dialup.earthlink.net
> [209.178.182.212])
> 	by grupoceac.ceac.com (8.8.8+Sun/8.8.8) with SMTP
> id FAA19860;
> 	Thu, 5 Oct 2000 05:18:19 +0200 (MET DST)
> Message-ID:
>
<00000a38059c$000033b9$0000128e@mcpeely.concentric.net
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <aft@arbi.informatik.uni-oldenburg.de>
> Subject: Feed Your Pet Not The Ants



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- klambake@earthlink.net wrote:
> From klambake@earthlink.net Sat Oct  7 21:23:53 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <klambake@earthlink.net>
> X-YahooFilteredBulk: 63.26.114.232
> Received: from
> 1Cust232.tnt5.baton-rouge.la.da.uu.net  (HELO
> msn.com) (63.26.114.232)
>   by mta467.mail.yahoo.com with SMTP; 07 Oct 2000
> 21:23:29 -0700 (PDT)
> From:  <klambake@earthlink.net>
> Subject: .       ,           .



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- geiwo@forum.dk wrote:
> From geiwo@forum.dk Sun Oct  8 19:11:30 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <geiwo@forum.dk>
> X-YahooFilteredBulk: 211.40.179.68
> Received: from 211.40.179.68  (EHLO ahanet.co.kr)
> (211.40.179.68)
>   by mta440.mail.yahoo.com with SMTP; 08 Oct 2000
> 19:14:23 -0700 (PDT)
> Received: from ewill
> (1Cust102.tnt5.auburn.wa.da.uu.net [63.30.16.102])
> 	by ahanet.co.kr (8.9.3/8.9.3) with SMTP id
> LAA06454;
> 	Mon, 9 Oct 2000 11:11:30 +0900
> Date: Mon, 9 Oct 2000 11:11:30 +0900
> From: geiwo@forum.dk
> To: geiwo@forum.dk
> Comments: Authenticated sender is <geiwo@forum.dk>
> Subject: Cyber Investigator's Assistant!



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- liza14@ibm.net wrote:
> From liza14@ibm.net Mon Oct 09 12:57:06 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <liza14@ibm.net>
> X-YahooFilteredBulk: 63.26.114.138
> Received: from
> 1Cust138.tnt5.baton-rouge.la.da.uu.net  (HELO
> excite.com) (63.26.114.138)
>   by mta119.mail.yahoo.com with SMTP; 09 Oct 2000
> 05:48:03 -0700 (PDT)
> From:  <liza14@ibm.net>
> Subject: uuuuuuuuuuuuuuuuuuuu



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- hAedRq78Z@mimj.co.jp wrote:
> From haedrq78z@mimj.co.jp Tue Oct 10 08:51:35 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <haedrq78z@mimj.co.jp>
> X-YahooFilteredBulk: 163.121.197.221
> Received: from unassigned.menanet.com.eg  (EHLO
> mansourgroup.com) (163.121.197.221)
>   by mta324.mail.yahoo.com with SMTP; 10 Oct 2000
> 01:51:34 -0700 (PDT)
> Received: from 253tuutDl
> (1Cust48.tnt2.chi1.da.uu.net [63.21.65.48]) by
> mansourgroup.com with SMTP (Microsoft Exchange
> Internet Mail Service Version 5.5.2650.21)
> 	id TT24PJ2X; Tue, 10 Oct 2000 10:46:44 +0200
> Date: 10 Oct 00 5:31:13 AM
> From: hAedRq78Z@mimj.co.jp



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- susan87@zxmail.com wrote:
> From susan87@zxmail.com Tue Oct 10 11:00:11 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <susan87@zxmail.com>
> X-YahooFilteredBulk: 63.17.144.169
> Received: from 1Cust169.tnt2.manchester.nh.da.uu.net
>  (HELO localhost) (63.17.144.169)
>   by mta130.mail.yahoo.com with SMTP; 10 Oct 2000
> 09:56:05 -0700 (PDT)
> Subject: Adult XXX Videos
> Message-Id: <pwjtv.njulhohgpkmfa@localhost>
> From: susan87@zxmail.com
> Content-Type: text/plain;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: 7BIT
> To: @yahoo.com



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- jemul@ttd.ibernet.es wrote:
> From jemul@ttd.ibernet.es Wed Oct 11 13:37:53 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> Return-Path: <jemul@ttd.ibernet.es>
> X-YahooFilteredBulk: 195.31.212.100
> Received: from 195.31.212.100  (HELO
> ntproxy.advantech.it) (195.31.212.100)
>   by mta449.mail.yahoo.com with SMTP; 11 Oct 2000
> 14:01:34 -0700 (PDT)
> Received: from myrop (ew6.southwind.net
> [216.53.98.70]) by onyx.southwind.netfrom
> homepage.com (114.230.197.216) by
> newmail.spectraweb.ch from default
> (m202.2-25.warwick.net [218.242.202.80])
> byhost.warwick.net (8.10.0.Beta10/8.10.0.Beta10)
> with SMTP id e9GKEKk19201 ([63.44.155.26]) by
> nt_proxy.advantech.it (Lotus SMTP MTA v4.6.5  (863.2
> 5-20-1999)) with SMTP id C1256975.00732D0F; Wed, 11
> Oct 2000 22:58:21 +0200
> Message-ID:
>
<00002a2c264c$00004708$00000881@mcpeely.concentric.net
> (mcfeely.concentric.net [217.15.198.83])by
> darius.concentric.net (8.9.1a/(98/12/15 5.12)) id
> PAA04003from default (m202.2-25.warwick.net
> [218.242.202.80]) byhost.warwick.net
> (8.10.0.Beta10/8.10.0.Beta10) with SMTP id
> e0GKEKk19201>
> To: <emily@mail.wilmod.nl>
> From: jemul@ttd.ibernet.es 
> Subject: Sensitive Herbas



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- rewkka@mailcity.com wrote:
> From rewkka@mailcity.com Mon Oct 16 11:51:22 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <rewkka@mailcity.com>
> X-YahooFilteredBulk: 63.26.114.45
> Received: from 1Cust45.tnt5.baton-rouge.la.da.uu.net
>  (HELO excite.com) (63.26.114.45)
>   by mta312.mail.yahoo.com with SMTP; 16 Oct 2000
> 04:51:18 -0700 (PDT)
> From:  <rewkka@mailcity.com>



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- yujzn@dj.net.tw wrote:
> From yujzn@dj.net.tw Sun Sep 24 00:49:20 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <yujzn@dj.net.tw>
> X-YahooFilteredBulk: 210.233.48.210
> Received: from dns1.kyoto-shaken.co.jp  (EHLO
> mail.kyoto-shaken.co.jp) (210.233.48.210)
>   by mta224.mail.yahoo.com with SMTP; 23 Sep 2000
> 17:49:18 -0700 (PDT)
> Received: from 206.133.236.34 [206.133.236.34] by
> mail.kyoto-shaken.co.jp
>   (SMTPD32-4.10) id AEA856B90292; Sun, 24 Sep 2000
> 09:41:12 +0900
> Message-ID: <00005a4e5151$00003870$000038c1@>
> To: <Undisclosed Recipients>
> From: yujzn@dj.net.tw
> Subject: Need to check someone out?                 
>        14529



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- sales@musicwarepos.com wrote:
> From sales@musicwarepos.com Wed Oct 25 15:13:12 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Received: from spool5.valueweb.net (216.219.253.139)
>   by mta468.mail.yahoo.com with SMTP; 25 Oct 2000
> 12:05:52 -0700 (PDT)
> Received: from musicwarepos.com
> (client209-42-207-154.intrex.net [209.42.207.154]
> (may be forged))
> 	by spool5.valueweb.net (8.9.2/8.9.2) with SMTP id
> PAA49024;
> 	Wed, 25 Oct 2000 15:05:42 -0400
> From: <sales@musicwarepos.com>
> Subject: IF YOU SELL MUSIC - READ ON .......



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- 841UBKXPi@aol.com wrote:
> From 841UBKXPi@aol.com Wed Nov  1 21:31:01 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path: <841ubkxpi@aol.com>
> X-YahooFilteredBulk: 195.246.1.125
> Received: from 195.246.1.125  (EHLO
> castor.perftech.si) (195.246.1.125)
>   by mta424.mail.yahoo.com with SMTP; 01 Nov 2000
> 21:28:46 -0800 (PST)
> Received: from [195.246.3.199] by castor.s5.net
> (NTMail 5.06.0016/AL0102.01.4ffdd1e4) with ESMTP id
> audoaaaa for doctorjenkins@yahoo.com; Thu, 2 Nov
> 2000 06:21:59 +0000
> Date: 01 Nov 00 11:36:01 PM
> From: 841UBKXPi@aol.com
> Message-ID: <S21lXQk570iuqqv>
> Subject: Re: New passwords



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- lettergrl22@yahoo.com wrote:
> From lettergrl22@yahoo.com Tue Nov 14 14:51:38 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <lettergrl22@yahoo.com>
> X-YahooFilteredBulk: 216.192.201.4
> Received: from atl-tgn-ygn-vty4.as.wcom.net  (HELO
> 216.192.201.4) (216.192.201.4)
>   by mta466.mail.yahoo.com with SMTP; 14 Nov 2000
> 15:49:45 -0800 (PST)
> Message-ID: <0000222559f6$00004d39$00007d3e@>
> To: <Undisclosed Recipients>
> From: lettergrl22@yahoo.com
> Subject: Hello San Francisco!!



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- Mike_Lewellen9909@indiatimes.com wrote:
> From mike_kinch9909@indiatimes.com Sun Sep 24
> 11:03:23 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3005.mail.yahoo.com
> Return-Path: <mike_kinch9909@indiatimes.com>
> X-YahooFilteredBulk: 195.130.72.1
> Received: from 195.130.72.1  (EHLO teiep.gr)
> (195.130.72.1)
>   by mta107.mail.yahoo.com with SMTP; 24 Sep 2000
> 04:03:18 -0700 (PDT)
> Received: from smtp.indiatimes.com
> (sdn-ar-002wimadiP123.dialsprint.net
> [158.252.99.187]) by teiep.gr (8.8.7/8.8.3) with
> SMTP id OAA21159; Sun, 24 Sep 2000 14:01:26 +0300
> (EET DST)
> To: Shamwell@hotmail.com



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- lopo6519559@hfhuet4,
UNEXPECTED_DATA_AFTER_ADDRESS@.SYNTAX-ERROR. wrote:
> From lopo6519559@hfhuet4@concentricnet.com Sun Sep
> 24 06:56:55 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3006.mail.yahoo.com
> Return-Path:
> <"lopo6519559@hfhuet4"@concentricnet.com>
> X-YahooFilteredBulk: 168.191.178.37
> Received: from sdn-ar-003txhousP299.dialsprint.net 
> (HELO rs9.media3.net) (168.191.178.37)
>   by mta202.mail.yahoo.com with SMTP; 23 Sep 2000
> 23:56:52 -0700 (PDT)
> Message-ID: <56956.97978@rs9.media3.net>
> From: lopo6519559@hfhuet4@concentricnet.com
> <lopo6519559@hfhuet4@concentricnet.com>
> Reply-to: io87u@prodigy.com
> Subject: Good News! Signup Online For Your
> *Guaranteed* Mastercard!!



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- esco@ns.yidong.net.cn wrote:
> From esco@ns.yidong.net.cn Sat Sep 23 06:06:10 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3001.mail.yahoo.com
> Return-Path: <esco@ns.yidong.net.cn>
> X-YahooFilteredBulk: 202.96.202.62
> Received: from 202.96.202.62  (EHLO
> ns.yidong.net.cn) (202.96.202.62)
>   by mta104.mail.yahoo.com with SMTP; 22 Sep 2000
> 21:27:42 -0700 (PDT)
> Received: from ns.yidong.net.cn
> (ip151.las-vegas17.nv.pub-ip.psi.net
> [38.29.117.151])
> 	by ns.yidong.net.cn (8.8.8+Sun/8.8.8) with SMTP id
> MAA17006;
> 	Sat, 23 Sep 2000 12:24:27 +0800 (CST)
> From: esco@ns.yidong.net.cn
> Message-Id: <200009230424.MAA17006@ns.yidong.net.cn>
> Received: from sky4@pino.co.kr by
> stevenkilman@kilman.com (8.8.5/8.6.5) with SMTP id
> GAA09422 for <paul34@pino.co.kr>; Fri, 22 Sep 2000
> 18:42:05 -0600 (EST)
> To: paul34@pino.co.kr
> Date: Fri, 22 Sep 00 18:42:05 EST
> Subject: Cell phones / Brain Tumors



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- "Dollarstore.com" <dollarstore57@excite.com>
wrote:
> From Dollarstore.com Tue Sep 19 22:53:05 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3003.mail.yahoo.com
> X-YahooFilteredBulk: 168.191.176.141
> Received: from sdn-ar-001txdallP251.dialsprint.net 
> (HELO e-unit-4) (168.191.176.141)
>   by mta419.mail.yahoo.com with SMTP; 20 Sep 2000
> 00:58:30 -0700 (PDT)
> From: "Dollarstore.com" <dollarstore57@excite.com>
> To: <doctoroblivious@yahoo.com>
> Subject: 25 items, $25.00, Free Shipping - No
> Kidding!



I HAVE RECEIVED SPAM FROM YOUR SITE.  YOU WILL NOW BE
FORWARDED ANY AND ALL SPAM I GET.  ENJOY.
--- beoin@pageend.com wrote:
> From yotana@pageend.com Fri Oct 06 17:37:56 2000
> X-Apparently-To: doctoroblivious@yahoo.com via
> web3004.mail.yahoo.com
> Return-Path: <yotana@pageend.com>
> X-YahooFilteredBulk: 63.29.199.213
> Received: from 2Cust85.tnt33.lax3.da.uu.net  (HELO
> mylocalserver.com) (63.29.199.213)
>   by mta457.mail.yahoo.com with SMTP; 06 Oct 2000
> 10:35:55 -0700 (PDT)
> To: ustani@pageend.com
> From: beoin@pageend.com
> Subject: Safe, Natural, Herbal Sex Formula!

[Back to CCP14 Web/Config Main Page] | [Back to CCP14 Web/Config Misc Things]

[CCP14 Home: (Frames \| No Frames)] CCP14 Mirrors: [UK] \| [CA] \| [US] \| [AU]	What's New	Introduction	Site Map
Search the CCP14	Download Programs What do you want to do? (lists of software by crystallographic method)	Tutorials	Solutions

(This Webpage Page in No Frames Mode)

If you have any queries or comments, please feel free to contact the CCP14