Re: DKIM?
look-a-like domains can have all three and pass automated checks as the system checks the look-a-likes dns.
the only way to catch it is for the recipients to notice its the look alike not the real, or for the orgs to have look-a-like protection....