Probably abuse of some product like Google Forms or another service.

Different subdomain, but same issue https://www.suped.com/learn/dmarc/how-to-deal-with-spam-from...