Do you have the actual header information from the original email that is being sent out? Does it look like a bestbuy address that is spoofed or what?