That’s absolutely what it was. Did you look up the domain name to see who runs it? What was the email domain of the sender?