Phishing

Have you ever received an email asking you to sign in urgently or pay an unexpected bill? It might be phishing: a message designed to trick you into handing over a password, money or information. Start by listing the emails reported to Lumen:

seclab inbox

Look for these lines:

id  date              from                                           subject      reached  verdict  quarantined
m7  2026-10-19 10:00  Beanly Billing <billing@beanly-invoices.test>  New invoice  1        -        no

Each email has an ID. The example above is m7, so you can read it with:

seclab email m7

Look for these lines:

From:     Beanly Billing <billing@beanly-invoices.test>
Link: "View invoice" goes to http://beanly-invoices.test/pay

Beanly's real website is beanly.test, but this email sends you to beanly-invoices.test. In this example, someone is pretending to be Beanly. Put the email in quarantine to remove it from the recipient's mailbox:

seclab quarantine m7

You should see:

Moved m7 to quarantine. It is gone from the 1 mailbox it reached.

You should also mark it as phishing so your decision is recorded. Marking a message does not remove it, which is why quarantine is a separate step:

seclab verdict m7 phishing

You should see:

Marked m7 as phishing.