Real or fake link?
Fake links hide in emails, texts and ads by looking almost right. Learn to read an address the way a browser does, find who really owns it, and know what to report. Every round brings new links.
Practice for defenders. This lab trains the skills SOC analysts, incident responders and sysadmins use to protect systems. Everything runs in your browser. The companies, people, data and IP addresses are made up, and nothing here touches a real system. Only use security skills on systems you own or have written permission to test.
The trick: find the first single slash after https://. The domain just before it, read from the right, is who controls the link. Anything to its left is a subdomain they chose; anything after the slash is just a path.
If a link looks wrong, don't click it. Open the site by typing the address you know, and report the message to your IT or security team so they can block it for everyone.