My company does this often. It sends legitimate looking emails and at last I fell for one recently. I thought about it, then I understood why. My company uses

My company does this often. It sends legitimate looking emails and at last I fell for one recently. I thought about it, then I understood why. My company uses a lot of saas products - for submitting expenses, for giving appreciations etc etc. These saas products regularly sends emails, and they come from other domains. When my company used all home grown or on premise web apps I never ever opened any emails coming from a different domain or open them very cautiously. And now I think these saas emails have probably taught my brain to trust emails from other domains. I am not sure.