If someone will send me a copy of the email (or post it here), WITH COMPLETE HEADER INFO, I can trace the source of the message but keep in mind that servers get compromised all the time, and people's accounts get compromised as well (actually, it's usually because users choose stupidly simple passwords, but that's another topic for another day). So, I can tell you where it came from but probably not who is actually responsible for sending it. If it turns out to be the CCA (or related) server, I'll help repair the problem as well.

P.S. COMPLETE HEADER INFO is all of the "garbage" that's normally hidden in the message (at the top) but easily viewable if you know how to get to the properties of the message.