sysop@hub:~/explainers/phish-or-legit$

phish-or-legit

Ten messages, one decision each: phishing or legit? Some are obvious, some are not. After every answer you see the signs to look for. Nothing you choose leaves your browser.

All names, domains and codes are made up for this exercise. Use your own company's reporting process for real suspicious messages.

Related: AiTM phishing explained Email header analyzer Glossary: phishing