This is a good point. It's become typical for companies to use different email sending domains. What we really should be doing is automating what I do when I g

This is a good point. It's become typical for companies to use different email sending domains. What we really should be doing is automating what I do when I get an email from a new domain that might be legit. Look up the DNS info so I can confirm it's the company they say they are.