[widebody911]

I got one a couple of days ago that was the most sophisticated I've seen yet. It claimed to be from the ISP hosting my vintagebus domain, claiming that I had exceeded by bandwidth by X amount, which came to $Y and had a link to secure form where I could not only pay for that bandwidth, but also pre-pay for anticipated overages, or bump up my bandwidth allocation altogether. Very slick, and it even had all of my whois data dropped in. If it hadn't been for the fact that my CNAME and A records don't point to the same place, I might have fallen for it.