Comment by z3t4

I've got an example and submitted it via bug bounty channel, but they classified it as "social engineering".