This sounds like what's happening to us, but only if the dreaded 25friday.com keyword is included on the email content