Interesting they don't seem to have SPF/DMARC configured properly. That would probably get rid of most spam, at least at major providers.

After setting up a DMARC reporting address for my own domain I was surprised at the amount of emails supposedly from my addresses that are getting rejected, mostly by gmail and yahoo.