Cool, but it would be great if you named this as password reset poisoning via host header injection.