I love these sorts of emails.

I also got one the other day that claimed to be from Time Warner Cable. They wanted me to update my payment method. The email appeared to be from TWC™ Roadrunner Billing Services, and the return address was billing@billing.rr.com. But when you expand the subject it indicates that it was actually sent from cole.anderson2@tesco.net. I’m not sure why Time Warner contracted Cole Anderson to collect their payment data, but I’m sending my credit card information right away.