It looks to me like a probably legit birthday cards site, sending what is supposed to be a legit request.
Now, from the name of the user, and the targeted address, it appears to be a spammer/scammer misusing the site to try to harvest contact info. Since the sender (birthdayalarm.com) is bonded, the right thing to do would be to notify them of the voilation so they can take appropriate action. Loren