Their SPF/TXT record lists a bunch of addresses including several from Rackspace (the same people who run the domain spamhaus.net), a few really from Malta, and a few from germany. The emails came from Vodaphone in Malta.

Paul Shupak track@plectere.com