it's also possible that's it address spoofing (they set the from field to your email instead of their own). This would make it look like it comes from your domain, but it's sent from somewhere else.
I see you got gmail, and I guess it was there you got it. You could go inside the message, click...