1) yes scanner emails scans, thus the App p/w.
2) The specific message in my case was not SMTP. It was specifically an IMAP login, unlike the previous poster that had the SMTP login notice.
Anyhow, thanks for your suggestions.
But I am fine regarding finding the cause.