Most if not all email providers do that when they get phishing or spam alert (every user can send those) to check out if that message is actually a threat. Mayb

Most if not all email providers do that when they get phishing or spam alert (every user can send those) to check out if that message is actually a threat. Maybe the best option for you is to setup your own email server which is fairly simple this days.