Got a "real" invoice from Paypal, purporting to be GoDaddy saying "If you do not make a payment today, the domain will be marked for deletion."
A quick google shows these have been reported to PayPal at least 6 months, so I'm wondering why PayPal still fails to block these emails purporting to be from "GoDaddy"? Seems like thats a relatively straightforward scam to detect/stop... ANY invoice request that starts "Invoice from GoDaddy".
(Or, if GoDaddy does actually have an option to sometimes send invoices via PayPal, PayPal could at least ensure it is from the "confirmed" GoDaddy account.)
In retrospect it is surprising it took scammers this long to try this since most (non-private) domain WHOIS records include the domain name and the admin contact email.