From cnnvh@sonic.net Sat Jul 21 19:03:39 2007
Return-Path: 
X-Spam-Virus: Yes (Email.Phishing.RB-1221)
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on omni.physics.smu.edu
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=514.8 required=6.0 tests=AWL,BAYES_50,CLAMAV,
        DCC_CHECK,HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,NORMAL_HTTP_TO_IP,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_DUL,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,
        RCVD_IN_XBL autolearn=spam version=3.1.8
X-Spam-Report:
        *  3.1 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
        *  4.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
        *      1)
        *  0.2 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
        *  0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
        *      [score: 0.5011]
        *  3.5 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
        *  500 CLAMAV Clam AntiVirus detected a virus
        *  2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
        *      [69.76.76.79 listed in dnsbl.sorbs.net]
        *  1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
        *      [Blocked - see ]
        *  3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
        *      [69.76.76.79 listed in zen.spamhaus.org]
        *  1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
        *      [69.76.76.79 listed in combined.njabl.org]
        *  0.0 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
        *      [69.76.76.79 listed in zen.spamhaus.org]
        * -5.6 AWL AWL: From: address is in the auto white-list
Received: from CPE-69-76-76-79.wi.res.rr.com (CPE-69-76-76-79.wi.res.rr.com [69.76.76.79])
        by omni.physics.smu.edu (8.13.1/8.13.1) with SMTP id l6M03cfg028550
        for ; Sat, 21 Jul 2007 19:03:39 -0500
Received: from ht.jbsf ([59.207.65.42]) by CPE-69-76-76-79.wi.res.rr.com with Microsoft SMTPSVC(5.0.2195.5329); Sat, 21 Jul 2007 19:03:46 -0500
Message-ID: <001201c7cbf3$c5e9e500$2a41cf3b@ht.jbsf>
From: "Postcard.com" 
To: 
Subject: [SPAM] You've received a greeting card from a School friend!
Date: Sat, 21 Jul 2007 19:03:46 -0500
MIME-Version: 1.0
Content-Type: text/plain;
        format=flowed;
        charset="Windows-1252";
        reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4029.2901
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4029.2901
X-Spam-Prev-Subject: You've received a greeting card from a School friend!

Hi. School friend has sent you a greeting card.
See your card as often as you wish during the next 15 days.

SEEING YOUR CARD

If your email software creates links to Web pages, click on your
card's direct www address below while you are connected to the Internet:

xxxx://68.166.54.28/?537de749d268cdb7e70b750e

Or copy and paste it into your browser's "Location" box (where Internet
addresses go).

We hope you enjoy your awesome card.

Wishing you the best,
Postmaster,
Postcard.com