What does it mean to be spoofed? And would a full fledged email service provider have a misconfigured server?