2 of our employees got an email from one of our clients (One was CC'd the other was main recipient).

The main recipient replied back to the client with reply all and internal person was not found. So we looked at the reply to address and this is what was found. Username and Domain changed by me.

For some reason the (@state.in.us) was added to end and obviously the first part of it is wrong. Also we are not part of the state.in.us domain.

So anyway I looked at the originals properties and it shows IMCEAMAILTO-Username+40OurDomainName+2Ecom@state.in.us. However on the emails main page it shows (username@ourdomain.com). In the GWIA log it shows (username@ourdomain.com).

What could cause this?

Just wondering,