This article explains how to clearly identify emails that are part of a phishing simulation.

Prerequisites

1. Log in to the Control Panel.
2. Select the desired customer in the area selection.
3. Navigate to Email Security > Email Live Tracking

Note: To limit the search to specific fields, we recommend the following manual article: Limit search to specific fields

To determine whether the emails are part of the phishing simulations, you have the following filter options:

You can either filter by the source hostname/sender’s hostname and search for:

awareness-mta.hornetsecurity.com

Or you can filter by the header and search for:

X-ITSEAL

In the email headers, you will find the following:

With both methods, you can identify all emails sent by our system that are part of the phishing simulation.

If the email in question is not part of the simulation, you can report it to us. For this, please read the following article: Reporting False Positives and False Negatives