sounds like it was spoofed or a misconfigured mail server.