Host Header Poisoning

The victim will receive an authentic looking email - sent from your domain - asking them to re-enter their credentials on a website under the attacker's control.

A Malicious Link
<!-- Notice how the link points to the attacker's website! -->
<a href="https://www.malicious.com/reset/318ae962-fe1d-4bc3-94d3-04202becc559">
  Click here reset your password
</a>