A very helpful guy from CECash contacted me last night -- we looked at the headers, I showed him all the emails that I had received to the email address in question that got hit with this SWOYT stuff... Everything looked to be in order.
The best possible scenario that they can come up with now is that maybe somebody accessed my stats on CECash and were able to get my email that way... but CECash has IP logs of all this -- which is pretty amazing if you ask me... we will see if anything turns up. So far it's a pretty boring problem, but you have to raise an eyebrow when this could happen again and honest people get blamed instead of the real instigators...
Fortunately this is an infrequent problem as far as webmaster emails go -- the only other thing that really upset me was somebody got my paypal email -- my guess is the HTML Paypal form on one of my sites was hit by a robot. Now I can't really block all that spam without losing my paypal account
If Paypal was smart they would do some basic encryption of the email address for their submit forms -- otherwise everyone with a Paypal button will have a box full of trojan/worm attack...
ME