Hm, well, let's wait and see what the mods on this site have to say. It does sound like it was triggered by the card expiring.
Liz
Kirk Merley wrote:
This is the origin, from the message: "HughesNet Support" <kpmalone@hughes.net> I assumed that it was phishing too, but I cannot access my account information on the customer support site. No, I have not released any information. The credit card that they are billing to expired this month and the new data needs to be entered... that is my assumption on what triggered this message... it appears to be valid. I am going to trace the IP address of the message next.