Fake warning message linked to bogus login page.
Subject: Warning: Inbox for firstname.lastname@example.org is limited [13 undelivered messages]
Date: Fri, 07 Apr 2017 17:29:15 +0100
From: Mail Delivery Subsystem <email@example.com>
This message was created automatically by mail delivery software.
More than 5 incoming messages could not be delivered to your inbox since over 72 hours.
The following address(es) failed: READ Your Undelivered Messages On Server
host smtp.mailchannels.net [188.8.131.52]
SMTP error from remote mail server after end of data:
550 5.7.1 [CS] Messages blocked MAIL FOR: firstname.lastname@example.org <mailto:email@example.com>. If
you receive this email in your SPAM/JUNK, Kindly move to inbox as to enable you complete the verification.
|fake error screen with user name filled in from URL|
Things to Note
- Message is customize with email address in message and subject
- URL linking to form includes the email address
- Webform fills in the user name from the URL - but would put any name in if you change the URL