I got that message too. It must be somebody from Microsoft > ...msg via CCAT from "ralphgriswold@xxxxxxxx".