Wordfence alert sent to other email not in “Where to email alerts”

Hi,

I have set the “Where to email alerts” to a particular email address like [email protected], I assumed that all alerts generated by Wordfence would send to this email only. However, that is not the only email address that Wordfence would send out.

I have a plugin “WP HTML Mail” Version 2.8.4.2 installed and set the Sender email to the the website owner such as [email protected]

I performed a test using Administrator role to login to the backend WordPress admin console, then Wordfence sent out an alert to mailing list in “Where to email alerts”.

This email address:[email protected] received an email

This email was sent from your website "XXXX" by the Wordfence plugin at Thursday 14th of March 2019 at 09:39:00 PM
The Wordfence administrative URL for this site is: https://www.xxx.com/wp-admin/admin.php?page=Wordfence
A user with username "admin" who has administrator access signed in to your WordPress site.

However, another email address [email protected] also received an email

Sender: Support Team ([email protected])
To: [email protected] 
Subject: [Wordfence Alert] xxxx.com Admin Login
Well Received your enquiry! We will handle it and get back to you shortly! Thanks for choosing our services! XXXX

Is there a way to keep all alerts to be sent only for email addresses in “Where to email alerts”?

Wordfence version :
Version 7.2.3

WP HTML Mail:
Version 2.8.4.2

Regards,
Venom