E-Card Scam?

Here's something to watch out for: an e-card scam. David Passell passes along this warning:  "I got this message today. I am always suspicious of them, even the ones that Bobby sent for my birthday and Valentine's until I have verified with the sender. I went to the Hallmark.com website and after having been led through a 'labyrinth' of possibilities (including giving a name, email and phone number), to ask them a question, I determined that whenever you get a message like this you should forward it to
abuse@hallmark.com which i did.

"I am forwarding my copy of the email to them. I do not understand why these companies that are so attempting to protect their image make it so difficult to determine how to forward a question on the legitimacy of an email that purports to come from them. I would think that information would be right at the top of their home page. When you forward an email be sure to first select 'View long headers' as I have done. Notice the text in red that follows 'X-spam-report.'"

Date: February 20, 2010 6:54:26 PM MST
To: abuse@hallmark.com
Subject: Fwd: You've received A Hallmark E-Card!

Begin forwarded message:
From: hallmark.com
Date: February 20, 2010 4:27:20 PM MST
To: davidrex@northlink.com
Subject: You've received A Hallmark E-Card!
return-path: root@mail.krankenhaus-hale-saale.de
return-path: root@mail.krankenhaus-halle-saale.de
received: (qmail 20765 invoked by uid 1034); 20 Feb 2010 23:28:13 -0000
received: from spam2.commspeed.net ( by 0 with SMTP; 20 Feb 2010 23:28:13 -0000
received: From mail.krankenhaus-halle-saale.de ( by spam2.commspeed.net (MAILFOUNDRY) id nFRKCB53Ed+CoQAw for davidrex@northlink.com; Sat, 20 Feb 2010 23:28:13 -0000 (GMT)
received: from localhost ([]) by mail.krankenhaus-halle-saale.de with esmtp (Exim 4.63) (envelope-from ) id 1NiyjL-0005FC-Ne for davidrex@northlink.com; Sun, 21 Feb 2010 00:27:24 +0100
received: from mail.krankenhaus-halle-saale.de (localhost []) by localhost (AvMailGate-2.1.4-7) id 20138-0UI6M4; Sun, 21 Feb 2010 00:27:22 +0100 (CET)
received: from root by mail.krankenhaus-halle-saale.de with local (Exim 4.63) (envelope-from ) id 1NiyjI-0005EH-PY for davidrex@northlink.com; Sun, 21 Feb 2010 00:27:20 +0100
x-envelope-from: root@mail.krankenhaus-halle-saale.de
x-envelope-to: davidrex@northlink.com
content-type: text/html
x-antivirus: checked by Avira MailGate (version: 2.1.4-7; AVE:; VDF:; host: router2); id=20138-0UI6M4
x-spam-score: -1.3 (-)
x-spam-report: Spam detection software, running on the system "router2", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: You have recieved A Hallmark E-Card. Hello! You have recieved a Hallmark E-Card. To see it, click here, [...] Content analysis details: (-1.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.0000] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 1.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 AWL AWL: From: address is in the auto white-list