Jon, There's a lot going on in that header. I tried plucking out a couple of parts of it to research and they all end up at dead ends. I tried the very top line, with address markers:
Received: from sangoma.ceg.co.za ([196.15.163.52] helo=winns.ceg.co.za)
If you put sangoma.ceg.co.za into Google you get some hits, but I can't make much sense of them. If you plug in the ([196.15.163.52] bit then you come to a tidy little dead end with the two following addreses linked: www.tlgusa.net/ kburgess.com but you can't get there from here.
I can't plug an address into my Norton to research any web addresses other than those it receives and sees as suspect, so I can't track down any of this further. But I'll bet we have some geeks on the list who can.
I get a lot of these that appear to be to someone other than me, but it's just a gimmick. All of it is just a gimmick.