ph1sh.me | Wiki
Learn to spot phishing emails: check the sender, hover the link, and read authentication headers. Play the Game and practise with our phishing game simulator.
Playing
Inspecting
Authentication
How To: Read a DKIM Signature
A pass proves the signing domain, not the brand in From.
How To: Read an Email Header
Compare Authentication-Results, Return-Path, Reply-To and From.
How To: Read DMARC Results
DMARC asks whether SPF or DKIM match the visible From.
How To: Read SPF Results
SPF checks who was allowed to send, not the display name.
How To: Spot Email Spoofing
The From line can be forged. Check Return-Path and authentication.
How To: View an Email Header
Open original headers in Gmail, Outlook, Apple Mail and Yahoo.