Please Restore Your Account Access
service@paypal.com to undisclosed-re.

show details 3:18 AM (7 hours ago)
from service@paypal.com paypal@service.com
to undisclosed-recipients
date Sun, Jun 8, 2008 at 3:18 AM
subject Please Restore Your Account Access

hide details 3:18 AM (7 hours ago)Please Restore Your Account Access
service@paypal.com to undisclosed-re.

Results for whois

Command: whois sportslab.gr

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

%ERROR:101: no entries found
%
% No entries found in the selected source(s).


Results for dig

Command: dig sportslab.gr


; <<>> DiG 9.4.1-P1 <<>> sportslab.gr
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40449
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;sportslab.gr. IN A

;; ANSWER SECTION:
sportslab.gr. 14366 IN A 207.58.187.54

;; AUTHORITY SECTION:
sportslab.gr. 86366 IN NS ns1.hotsoft.gr.
sportslab.gr. 86366 IN NS ns2.hotsoft.gr.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Jun 8 17:22:24 2008
;; MSG SIZE rcvd: 90

Results for ping

Command: ping -c 10 hotsoft.gr

PING hotsoft.gr (207.58.187.55): 56 data bytes
64 bytes from 207.58.187.55: icmp_seq=0 ttl=56 time=74.228 ms
64 bytes from 207.58.187.55: icmp_seq=1 ttl=56 time=73.072 ms
64 bytes from 207.58.187.55: icmp_seq=2 ttl=56 time=73.165 ms
64 bytes from 207.58.187.55: icmp_seq=3 ttl=56 time=73.724 ms
64 bytes from 207.58.187.55: icmp_seq=4 ttl=56 time=78.128 ms
64 bytes from 207.58.187.55: icmp_seq=5 ttl=56 time=73.328 ms
64 bytes from 207.58.187.55: icmp_seq=6 ttl=56 time=73.252 ms
64 bytes from 207.58.187.55: icmp_seq=7 ttl=56 time=74.627 ms
64 bytes from 207.58.187.55: icmp_seq=8 ttl=56 time=73.301 ms
64 bytes from 207.58.187.55: icmp_seq=9 ttl=56 time=73.163 ms

--- hotsoft.gr ping statistics ---
10 packets transmitted, 10 packets received, 0% packet loss
round-trip min/avg/max/stddev = 73.072/73.999/78.128/1.460 ms

header_sportslab.gr.jpeg

Header Analysis

Welcome, traveller! You appear to be from United States.

The following IP addresses were extracted from your headers:
IP Address Probable Country Additional Info
80.12.242.47 France* Whois Google
80.12.242.47 France* Whois Google
80.12.242.47 France* Whois Google
80.12.242.47 France* Whois Google
91.121.10.176 France* Whois Google
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
Delivered-To: scamfraudalert@gmail.com
Received: by 10.150.150.4 with SMTP id x4cs55913ybd;
Sun, 8 Jun 2008 03:19:26 -0700 (PDT)
Received: by 10.86.98.10 with SMTP id v10mr2778432fgb.39.1212920365786;
Sun, 08 Jun 2008 03:19:25 -0700 (PDT)
Return-Path:
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.47])
by mx.google.com with ESMTP id d6si7893839fga.2.2008.06.08.03.18.42;
Sun, 08 Jun 2008 03:19:25 -0700 (PDT)
Received-SPF: fail (google.com: domain of paypal@service.com does not designate 80.12.242.47 as permitted sender) client-ip=80.12.242.47;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of paypal@service.com does not designate 80.12.242.47 as permitted sender) smtp.mail=paypal@service.com
Received: from User (ns23110.ovh.net [91.121.10.176])
by mwinf2108.orange.fr (SMTP Server) with ESMTP id ED64A1C00094;
Sun, 8 Jun 2008 12:18:04 +0200 (CEST)
X-ME-UUID: 20080608101804972.ED64A1C00094@mwinf2108.orange.fr
From: "service@paypal.com"
Subject: Please Restore Your Account Access
Date: Sun, 8 Jun 2008 12:18:42 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20080608101804.ED64A1C00094@mwinf2108.orange.fr>
To: undisclosed-recipients:;

Robtex Analysis - 91.121.10.176
www.ghost-forum.net