Indeed, it needs to be more than just the company name if you want it to be useful later. If the email address used is [email protected], any idiot could guess company. But receiving email to [email protected] is clearly gotta be from them, or they got hacked.