Just fyi, anyone can send email (a.k.a. spoofing) from @autonation.com, the harder part is correspondence from that domain - but I think you were pretty much aware of the scam at that point. Good job.