[ttul]

We have capabilities to detect this sort of thing, but the best way a domain owner can prevent impersonation is by using DMARC.