Eb, it might LOOK like it came from the correct url/mail address, but if you look a little more closely (look at the headers, or right-click on the addy to copy shortcut and paste the result somewhere to look at it but not answer it), it's probably a "spoofed" address nothing like the one it should be.

~S~