GoDaddy sent an email to employees announcing a surprise holiday bonus. It was really a phishing email test, and those who failed were invited to get more security training