Does anybody use myVault features of ZoneAlarm Pro to protect email addresses?

This afternoon, Asia Pacific time, just replied my boss email and ZAPRO has alerted me 4 times that my email program is trying to send email to our outgoing SMTP Server hosted by our ISP. Is this normal?

The first alert, I allow to send the email and the other three, I deny it. Checking at my Sent Items folder, the email did sent out..

My conclusion for this is, Im sending out 3 other copies to unknown recipient cause my message doesn't have CC, BCC or even attachment..

Am I right with my conclusion?

Note: I just put my two company email address to ZoneAlarm Pro's myVault email protection.

Thanks.