Phishing Detector: Sort the Mailbox

One employee's inbox holds 8 messages. Some are ordinary business, and some are attempts to steal a password, talk someone into paying or get them to open a harmful file. You are the second pair of eyes, and your job is to sort them.

Open each mail and decide: legitimate or phishing. Look at the sender address rather than the display name, check where each link really points, not what its text says, and notice pressure, whether it is an urgent deadline, a threat or a reward. Attachments with unexpected types deserve suspicion too. Lookalike domains, with a letter swapped or an extra word added, are a favourite trick.

When you are done, send your verdicts. If every one is correct, the server returns the flag. If not, it tells you how many are wrong but never which, so reconsider the mails you were least sure of.

The mailbox is generated for your instance only, and all names and addresses are invented.