Simulated phishing test
// you took the bait — but it was only a drill
You got hooked. Now grab the rod and go fishing.
The email that reeled you here was a safe simulation from the ista solutions security team. Here's the fun part — you're the angler now. Reel in six messages and sort the keepers from the phish. Takes about 90 seconds.
~90%
of breaches start with a phish
1 bad catch
can sink a whole network
6
to reel in and sort
Casting…
tap the water to reel in
0
0catch
01 / 06
0/6
sorted right
Nice haul
0
catch score
0
best streak
0%
accuracy
How to spot a phish every time
Read the real address, not the name
A display name is free to fake. Expand the actual from address and read the domain.
Inspect the domain character by character
Look for lookalikes: 0 for o, rn for m, I for l, and brand words glued into a new domain like amazon-alert.net.
Distrust urgency and threats
"Verify in 2 hours or lose access" is pressure engineering. Real services rarely rush you into a link.
Never enter credentials from an email link
Go to the site directly in your browser, or use the app. When unsure, contact IT — don't reply to the email.
Throw it back — hit Report Phishing
Don't just delete a phish. Use your mail client's Report Phishing button; reporting protects the whole crew, not just you.
This exercise was educational only. No credentials, keystrokes, or personal data were captured on this page.
Security Awareness Training · ista solutions