Before you open that email
by Froga
The ideas the Spot the Phish lab assumes: display names versus real addresses, lookalike domains, what SPF/DKIM/DMARC actually check, and what to do instead of clicking. Ten minutes.
You're previewing this room. Log in or create a free account to answer the questions and track your progress.
Study material
An email’s From field actually holds two separate things: a display name, which is free text the sender can type as anything at all, and the real address the message came from. Most mail apps only show the name by default, which is exactly why this is such a common trick.
If an email’s From field displays "Northwind Bank Security" as the sender name, the message was definitely sent by Northwind Bank.
true false
True
False
The display name costs nothing to fake. What does the address say?
Log in to answer
Ready to test yourself?
Sign up free to answer, score points, and build your streak.