I got a suspicious email today that turned out to be a Hostgator phishing scam. It was very well constructed and I might have fallen for it except for two things that triggered my BS detector.
A client forwarded to me a suspected phishing email she'd gotten. This one has many of the earmarks of a phishing email. The From field reads "WordPress", but is a link to some other email address which I won't publicize here. The subject line reads "Error with your installation" which is vague and yet contains the emotional trigger word "Error". The body of the email tries to look legitimate by including the WordPress logo and has a link which reads "Please install this security patch", another emotional trigger and a techie-sounding reference to a "patch".