Funnily enough, I just got this same issue. Someone sending as “empty-env-from@localhost” with phishing emails trying to imitate my company almost perfectly…

Linking to https://profile.principals.digital/introductions.html?review=<redacted@redacted.ca>

Pretty sophisticated phishing attempt right there…

Sorry to bring up such an old thread, but I thought this was relevant as you’re the only other person I’m seeing here getting an email from empty-env-from@localhost on the forums.
Hope you’re doing well! 🙂