Anomalously high email open rates—exceeding 100%—can indicate compromised accounts rather than successful campaigns. Attackers exploit DKIM replay by sending one authenticated message through a legitimate account, then redistributing that signed message to thousands of recipients, causing the tracking pixel to fire far more times than the original recipient count, creating mathematically impossible open-rate metrics.