Notification of unauthorized access to the web application

Despite the fact that I use really long passwords and two-factor authentication wherever possible, I still worry that someone will break one of my accounts. The most important is Gmail.

In fact, everyone should worry about their email accounts first, since this is the Achilles heel of any online service. So much important information passes through the email that this is a real Klondike for a cracker. If a hacker has access to your email account - most likely he will get access to the rest of your accounts.

For this, I made a “canary” - a nice-looking bait letter, the idea of ​​which is to make the cracker open it. Here is how it looks in my inbox:
')


This marked letter from Barclays Private Banking is really just a fake. If you open it, you'll see this:



And opening it, you release the canary. The company logo below is loaded from my server. The script writes the browser's IP address to the log and sends an SMS to my phone:



I wonder if there is a commercial service that provides such functionality? For example, such a service could insert images into various other online services and send notifications. It would also be possible to agree with other vendors that would include such code in their applications.

Ready idea for web service. Why don't you do it?