Well, the email changed but the password stayed the same and I don't really know what that means. GoDaddy says someone logged in and changed it this morning but they don't log the IP address so I can only guess it's malicious.