PRISM · INBOX.PHP
a phishing triage drill dressed as a 2007 PHP webmail. open each message, point at its links, read the header, then keep it, report it or junk it.
INBOX.PHP is a webmail client from the year everyone’s inbox was on fire. log in and open each message. then keep it, report it as phishing or move it to junk. links never go anywhere. point at a link and you’ll see where it really goes. the part of the address that decides that gets picked out. “View Full Header” shows what the sender’s server admitted to.
it’s an original content type, H5P.RvlsInbox, built on a shared toolkit (H5P.RvlsShady). that toolkit renders every email, address bar and console in PRISM. it emits ephemeral xAPI and stores nothing.
↓ download inbox.h5p — the whole program as one package; open it in any h5p player. licences · checksums