effectively making the content blend into the background and thus appear invisible. Enforcing all these CSS rules could therefore mean a phishing email is sent without the alert warning the victim.