Answer
The email addresses visible within the email are the MIME addresses. If the original email does not contain the MIME FROM email address, Microsoft IIS or Microsoft Exchange server will insert the administrator's email address into the MIME FROM field.
To avoid this time of spam see how to block spoofed emails.