[escalt]

This is what DMARC should solve, but it appears your mailserver lets these messages through without checking

[can16358p]

I used Outlook, Gmail, iCloud Mail. All three had the same behavior AFAIR.