Email
 |
| Graphical letter with Google branding warning users they will be shut down |
PDF attachment displays form with a link:
 |
| PDF attached to warning letter - with link to Brazilian fake Google login |
Fake Google login form (hosted in .br, brazil - NOT google.com)
 |
| Good copy of Google login - filling it in redirects to REAL Google login page |
Things to Note:
- No University of Minnesota branding
- No link in email - you're expect to download and open a PDF
- PDF contains link to a Brazilian (.br, NOT google.com) login page
- Fake login site will redirect you to a real Google site.
