I've checked them by hand and they did.
I've sent responses back to them asking them to look into this further.
Same deal, automated response advising that the reported email did not come from their domain. Well, I guess that's one way to deal with email complaints.