What is ph1sh.me?

ph1sh.me is a free phishing-awareness project. It exists to teach people how to mitigate email phishing by giving them knowledge and hands-on practice in a gamified inbox.

You play as a Conglomcorp Anti-Phishing analyst. Each shift, inspect incoming mail and mark messages Safe or Quarantine. The aim is not to memorise a checklist. It is to build the habit of looking closely at senders, links, and headers before you trust a message.

Start with the Game or the Wiki.

Is the Phishing Email Simulator free?

Yes. Everything on ph1sh.me is provided free for anyone. There is no account, and we do not collect your data. The simulator runs in your browser.

How does the Phishing Email Simulator work?

The site is built with Astro. The inbox is a custom client-side mail UI inspired by Aerion. Emails, scoring, and decisions stay in your browser — nothing is uploaded to a server.

The full source is available on GitHub.

Each shift draws 10 messages from a pool of 50. Genuine mail should stay Safe; hostile mail should go to Quarantine. See How to play for the rules.

What can I learn playing the Phishing Email Simulator?

Through the Game and the Wiki, you practise analysing emails against common phishing techniques:

• Checking the sender, not just the display name
• Spotting phishing links
• Viewing and reading email headers
• Email spoofing and authentication: SPF, DKIM, and DMARC
• What to do if you clicked a phishing link

This is not complete guidance. The threat landscape keeps changing, and attackers find new ways to write and deliver phishing email. The objective is to give you insight and analytical acumen so you can investigate a suspicious message yourself.

Who operates ph1sh.me?

ph1sh.me is developed by Montana Digital.

Will there be updates to the game?

Yes. The game launched in August 2026 and is receiving gradual updates to improve the experience.