🎣
Spot the Phish
Compare believable messages and learn the warning signs attackers rely on.
Interactive lesson60 Second Cyber Check
What would you do?
Choose the answer you would genuinely pick. There is no login and these exercises do not ask for or store real passwords.
1. A website you just opened says: “Give me your password.”
Never give a real password to an unexpected page. Check the exact domain and why the password is being requested.
2. Your manager urgently asks for an OTP code over WhatsApp.
Urgency is a classic social-engineering technique. OTP and MFA codes are credentials too.
3. Which address deserves extra suspicion?
Attackers often use look-alike names. Read the real domain from right to left before the first slash.
4. Your laptop is encrypted by ransomware. Which preparation helps most?
A backup attackers can encrypt with the computer is not enough. Keep independent copies and test restoration.
5. A padlock/HTTPS proves a website is trustworthy.
HTTPS encrypts the connection. A fraudulent site can also have a valid HTTPS certificate.
Your score will appear here.
Training rule #1: never type a genuine password, OTP, bank detail or confidential information into a demonstration.
Coming Next
Small lessons. Real-world consequences.
🔗
Read That URL
Learn domains, misleading subdomains, redirects and look-alike spelling without networking jargon.
Beginner friendly💾
Backup Survival
Lose a laptop, NAS or cloud account and discover which copies of your data actually survive.
Business continuity