Sender domain mismatch
You just clicked a phishing link.
Good news — this was a simulated phishing test run by your IT team. No data was lost and no system was compromised. Take a moment to learn the tells that gave it away.
What to look out for next time
-
Check the sender address, not just the display name. A friendly name like "IT Support" can sit in front of any email address — including one from outside your organisation.
-
Hover (don't click) any link to reveal the real destination. If the visible text says one thing and the URL preview shows another, that's the tell.
-
When in doubt, report the message using the Phish Alert button in Outlook. Real IT teams will never penalise a legitimate report.
Strengthen your team's phishing defence
This sample page is part of our managed security awareness service. Branded landing pages, 100+ phishing templates, automated remedial training, and ISO 27001 A.6.3 evidence — all run for you.
Showing this to a prospect? See all four variants on the sample landing pages index.