Phishing Detective

You are the analyst on duty. A mailbox full of reported messages needs sorting: find the lure, name the indicator that gives it away, and choose a safe response. There are four steps: triage the mailbox, spot the lure, name the indicator and choose the response. The mailbox is generated for you, so the details differ from other players, but the reasoning is the same. Each question is explained once you submit, so read the explanations even when you score well. Score at least the pass mark and you are given the flag. A pass earns points once, but you can retake the scenario as often as you like to see different evidence and practise the habits that catch real phishing: check the sender, check the destination, resist the deadline and report early. All names, domains and messages are invented for the lab.