Hacker News Reader

This is what DMARC should solve, but it appears your mailserver lets these messages through without checking

I used Outlook, Gmail, iCloud Mail. All three had the same behavior AFAIR.