Return-Path: <hoek8751@planet.nl>
Received: from hpsmtp-eml16.kpnxchange.com (213.75.38.116) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for  <spam-hater@studio42.com>; 
Sun, 22 Jun 2008 20:19:27 -0700
Received: from hpsmtp-eml32.kpnxchange.com ([213.75.38.88]) by 
hpsmtp-eml16.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.1830);	 
Mon, 23 Jun 2008 05:19:18 +0200
Received: from cpbrm-eml23.kpnsp.local ([195.121.247.250]) by 
hpsmtp-eml32.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.1830);	 
Mon, 23 Jun 2008 05:19:09 +0200
Received: from hpsmtp-eml23.kpnxchange.com ([10.94.53.250]) by 
cpbrm-eml23.kpnsp.local with Microsoft SMTPSVC(6.0.3790.1830);	 
Mon, 23 Jun 2008 05:19:09 +0200
Received: from localhost ([10.94.53.250]) by hpsmtp-eml23.kpnxchange.com 
with Microsoft SMTPSVC(6.0.3790.1830);	 Mon, 23 Jun 2008 05:19:08 +0200
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;	boundary="----_=_NextPart_001_01C8D4DF.E55BA2CC"
X-MimeOLE: Produced By Microsoft Exchange V6.5
Subject: Ticket Number is 07-08-10-13-31-{12}
Date: Mon, 23 Jun 2008 05:18:58 +0200
Message-ID: <389DC8E8CCEB2A4CB2FAF1553ED162D70E09465B@CPEXBE-EML17.kpnsp.local>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Ticket Number is 07-08-10-13-31-{12}
Thread-Index: AcjU39/kcXVOFY83T+CKqZnOQpnf2Q==
From: <hoek8751@planet.nl>
Bcc:
Return-Path: hoek8751@planet.nl
X-OriginalArrivalTime: 23 Jun 2008 03:19:08.0949 (UTC) FILETIME=[E6782C50:01C8D4DF]

 
 
Dear Winner,
 You have won the sum of 250,000.00 GBP  in the British Online Sweepstake Promo head on Sat 21 Jun 08. Your Ticket Number is 07-08-10-13-31-{12} To further the claims of your prize, you are advise to contact your claims department.
 Contact Person: Brender William
E-mail: b_wills0@hotmail.co.uk
Contact Number: +447024079738
Congratulations once again. 
 
Yours faithfully, 
Mr. Richard K. Lloyd
 
PLEASE DO NOT REPLY TO THIS EMAIL ADDRESS SEND YOUR DETAILS TO b_wills0@hotmail.co.uk FOR YOUR CLAIMS



[studio42@flatus studio42]$ host 213.75.38.116
116.38.75.213.in-addr.arpa domain name pointer hpsmtp-eml16.kpnxchange.com.
[studio42@flatus studio42]$ whois 213.75.38.116@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '213.75.0.0 - 213.75.127.255'

inetnum:      213.75.0.0 - 213.75.127.255
netname:      NL-PI-PLUS
descr:        HN-Plus
country:      NL
admin-c:      PT978-RIPE
tech-c:       PT978-RIPE
status:       ASSIGNED PA
mnt-by:       AS8737-MNT
remarks:      Please mail security issues to: security@planet.nl
remarks:      Please mail abuse issues to: abuse@planet.nl
source:       RIPE # Filtered

role:           Planet Technologies
address:        Stationsstraat 115 (visit address)
address:        P.O. box 3053
address:        3800 DB Amersfoort
address:        The Netherlands
phone:          +31 30 6588612
e-mail:         as8737-lir@kpn.com
nic-hdl:        PT978-RIPE
admin-c:        RH13540-RIPE
tech-c:         RH13540-RIPE
remarks:        For security & abuse issues see inetnum.
mnt-by:         AS8737-MNT
source:         RIPE # Filtered

% Information related to '213.75.0.0/16AS8737'

route:       213.75.0.0/16
descr:       PIADDR
origin:      AS8737
mnt-by:      AS8737-MNT
source:      RIPE # Filtered

Will most likely blacklist.

Onto next step:

[studio42@flatus studio42]$ host 195.121.247.250
Host 250.247.121.195.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 195.121.247.250@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '195.121.242.0 - 195.121.253.255'

inetnum:      195.121.242.0 - 195.121.253.255
netname:      NL-PI-CYBERCENTER
descr:        Cybercenter
country:      NL
admin-c:      PT978-RIPE
tech-c:       PT978-RIPE
status:       ASSIGNED PA
mnt-by:       AS8737-MNT
remarks:      Please mail security issues to: security@planet.nl
remarks:      Please mail abuse issues to: abuse@planet.nl
source:       RIPE # Filtered

role:           Planet Technologies
address:        Stationsstraat 115 (visit address)
address:        P.O. box 3053
address:        3800 DB Amersfoort
address:        The Netherlands
phone:          +31 30 6588612
e-mail:         as8737-lir@kpn.com
nic-hdl:        PT978-RIPE
admin-c:        RH13540-RIPE
tech-c:         RH13540-RIPE
remarks:        For security & abuse issues see inetnum.
mnt-by:         AS8737-MNT
source:         RIPE # Filtered

% Information related to '195.121.0.0/16AS8737'

route:       195.121.0.0/16
descr:       PIADDR
origin:      AS8737
mnt-by:      AS8737-MNT
source:      RIPE # Filtered

Zombie on their network? Would explain why it relayed through their system.

No scammer site. Just a Hotmail drop.