← All projects
INTERACTIVE LAB · EMAIL SECURITY

Phishing Investigation
Workbench

Inspect three fictional emails, compare sender and reply addresses, review authentication results and link destinations, and document an analyst assessment. Export your findings as a Markdown report.

Email triageHeader analysisJavaScriptAnalyst reporting
Open the investigation lab ↗

Try the payment-change case: passing authentication does not establish that a request is legitimate. Sample-data demo with deterministic rules; no live scanning.

FOLLOW THE EVIDENCE
  1. 01 / INSPECTMessage and indicators

    Headers · Reply-To · link destinations

  2. 02 / ASSESSExplain your decision

    Evidence, disposition, and next steps

  3. 03 / DOCUMENTExport an analyst report

    Compare with the sample walkthrough