Spot the lookalike sender domain

Your company domain is redsag.com. Which sender domain is most likely a deliberate lookalike used for phishing?

a) mail.redsag.com
b) redsaq.com
c) redsag.com
d) news.redsag.com