When you send shit like this you legitimise some of the techniques phishers use to drive engagement. Whoever did this needs to go sit in a corner and think about what they've done.