The email properties detail shows some origination from this site. (Sorry I'm not very knowledgeable about the routing information on email)
I obviously wouldn't click on the link, but am wondering if this is connected with the site's hack?
Received: from web1.fredmiranda.com (web1.fredmiranda.com [67.228.107.19])
by nlpi141.prodigy.net (8.14.4 IN/8.14.4) with ESMTP id q112mcU2001122
for <xxxxxxxxxxxxxx>; Tue, 31 Jan 2012 20:48:39 -0600
Received: from web1.fredmiranda.com (localhost.localdomain [127.0.0.1])
by web1.fredmiranda.com (8.13.8/8.13.8) with ESMTP id q112g6l9029269
for <xxxxxxxxxxxxxxx>; Tue, 31 Jan 2012 20:48:37 -0600
Received: (from fred@localhost)
by web1.fredmiranda.com (8.13.8/8.13.8/Submit) id q0UJU7ZR014997;
Mon, 30 Jan 2012 13:30:07 -0600
Date: Mon, 30 Jan 2012 13:30:07 -0600
Message-Id: <[email protected]>
To: xxxxxxxxxxxxxxxx
Subject: You won a Canon Digital Photo Camera
From: [email protected]
