Okay, this one is short and sweet because he's waiting for me to reply (and I won't) to tell his longer story. The originating server IP is 220.127.116.11 [server.girlkw.com] out of Oklahoma but scammers often hack into servers from which to send out their hundreds of thousands of emails. So no telling on this one.
Subject: Order Inquiry
From: James [email@example.com]
X-AntiAbuse: Sender Address Domain - server.girlkw.com [18.104.22.168]
X-Source-Args: /usr/bin/php /home/girlkwco/public_html/mailer.php
I want to place an order in your store,and i will like to know if you ship to Norway and my method of payment will be credit card. So please let me know if you can assist me with the order ,And please do not forget to include your web page in your replying back to my mail.I will await your prompt response as soon as you receive this mail.