Three stages of escalating difficulty - each testing a different layer of phishing detection.
Spot spoofed sender domains
Identify lookalike "from" addresses crafted to impersonate trusted brands - Dropbox, Google, your HR team.
Detect malicious links & attachments
Evaluate email body content, CTAs and file names for red flags before you click or download anything.
Identify social engineering tactics
Advanced manipulation patterns - urgency, authority, fear - the emotional triggers real threat actors exploit most.