Registration Form
Experience real phishing scams in a safe, simulated environment. Register below to participate.
📋 Hand the device to your coworker and have them enter their own information below.
✅ You're registered for the Phishing Derby. See you on the leaderboard.
Learn more about the DerbyYou're in, —!
You're registered for the 2026 Phishing Derby. The competition starts soon — get ready to prove your phishing instincts.
—
—
—
—
Brought to you by
Digital Defense — Digital safety is safety.
🏆 Superfan Referral Leaderboard
Top referrers win a prize! Share your code to move up.
| Rank | Superfan | Division | Referrals |
|---|
Your Derby Wrapped
Here's how you did in the 2026 Phishing Derby
🏆 Top performers
| # | Participant | Email Safety Score | Tier | Badges |
|---|
🎉 Claim your prize
Please provide a physical street address. We cannot ship to P.O. boxes.
USPS standardized address:
✅ Address submitted. Your prize kit will be on its way soon.
Brought to you by
Digital Defense — Digital safety is safety.
The Phishing Derby will return
Stay safe out there.
Brought to you by
Digital Defense — Digital safety is safety.
Your performance
Your performance determines the prize tier you earn.
Tap a color to see the tier name
Here's how your Email Safety Score™ is calculated.
Want to learn more? Visit the Resources tab to see how your Email Safety Score™ works.
Points trend
Tap or hover over the bars to view points earned or lost per simulated email.
Tap a bar to see simulation details
Risky behaviors
Risky behaviors reduce your Email Safety Score™ and can lead to data breaches, account compromises, and malware infections. Here's what we detected across your simulations.
Badges earned
Badges you can earn
Trainings assigned to you during the Derby. Completing them on time earns bonus points.
| Training | Type | Assigned | Due | Status | Score |
|---|
Click a campaign name to see the full email preview, scam indicators, and your points breakdown for that simulation.
| Campaign | Date Received | Outcome | Details | Score |
|---|
| Rank | Participant | Email Safety Score | Tier | Badges | Kudos |
|---|
No participants match your search.
| # | Division | Participants | Avg. email safety score | Report rate | Click rate |
|---|
Phishing scam impacts
These numbers represent real actions taken by Derby participants on simulated phishing emails. In a real attack, each one could compromise Delta's systems.
My team
| # | Name | Email Safety Score | Tier | Badges |
|---|
Division standings
| # | Division | Participants | Avg. email safety score | Report rate |
|---|
Bonus Points
Earn additional points toward your Email Safety Score™ by completing activities and trainings. New activities are activated throughout the Derby. Check back regularly for fresh opportunities to boost your score.
🎯 Activities
Complete activities to earn bonus points. Quizzes, surveys, and more appear throughout the Derby.
🛡️ Digital Safety Trainings
Bonus trainings assigned in ZenGuide are displayed below. Tap the tile to complete training in ZenGuide.
🔄 Derby 'Demption Trainings
These trainings are only assigned when you take a risky behavior. If you're assigned Derby 'Demption training it will be displayed below. Tap the tile to complete the training in ZenGuide.
Phishing Derby resources
Add a resource link
Edit contact info
Edit section
Remove item
Are you sure you want to remove this item?
Your score is built from three categories across all simulations during the Derby.
🛡️ Safety actions up to +150 per sim
Context and sender bonuses are auto-awarded when you report AND have zero risky behaviors on that simulation. Report within 3 days to receive credit.
⚠️ Risky behaviors deductions per sim
Your score can never go below 0. Every risky behavior on a simulation reduces your score.
🎯 Bonuses one-time awards
Training must be completed by the due date to earn bonus points. Late completions do not count. Both trainings are assigned through ZenGuide. 'Demption Training is only assigned when you take a risky behavior on a simulation — it's your chance to redeem yourself. Digital Safety Training is randomly assigned during the Derby, and you'll receive an email when new trainings are available.
Get to know our phish
Each of our phish represent a different type of phishing scam. Get to know each of them.
Choose your phish avatar
Pick a phish character to represent you on the leaderboard.
Profile tagline
Add a short tagline that shows when people hover your name on the leaderboard.
Leaderboard display settings
Control how your name appears on the public leaderboard.
Communication preferences
Choose which notifications and updates you'd like to receive.
Time at Delta
When did you join the Delta family? This may be shown on the Featured Participant spotlight.
Your Derby Achievements
🎉 Claim your prize
Congratulations! Submit your mailing address so we can send your prize kit.
Please provide a physical street address. We cannot ship to P.O. boxes.
USPS standardized address:
✅ Address submitted. Your prize kit will be on its way after the Derby is finalized.
Certificates
Achieve a prize tier and/or earn badges to receive a digital certificate. Tier and badges appear together on one certificate, awarded at the end of the Derby.
No achievements yet. Participate in the Derby to start earning badges and tiers.
Registered participants, returning vs. new breakdown, and employee types.
By employee type
Tier distribution and badge earners across all participants.
Tiers
Badges
Breakdown of campaigns by delivery method.
Aggregate risky actions taken across all simulations.
Device breakdown for phishing failures.
Average reporting and scoring performance.
Compares susceptibility and report rates between Derby participants and non-participants.
Susceptibility rate = % who took at least one risky action on non-Derby sims
Failure locations — click a row to drill down into participant details.
| City | State | Failures | Mobile |
|---|
—
| Participant | Campaign | Event | Device |
|---|
Report, click, and credential rates by division with color-coded thresholds.
| Division | Participants | Report rate | Click rate | Cred rate | Avg. email safety score |
|---|
Track Derby investment and calculate cost per participant for leadership reporting.
Compare performance and engagement between participants who collected a pin vs. those who didn't.
Bulk override participant scores for false positives or manual corrections. Select a campaign and behavior, then apply to affected participants.
Upload a CSV with an "Email" column. Participants matching those emails will be selected for the override.
Override history
🎯 Bonus Activity Overrides
Manually award or revoke bonus activity points for individual participants.
Activity override history
| # | Name | PPR | Years | Engagement | Pin | Waitlist | Remove |
|---|
—
—
Simulation history
Visual summary of registration form data. Updates live as new registrations come in.
Performance metrics for each phishing simulation campaign. Report rate column highlighted in green (safety action).
| Campaign | Type | Status | Sent | Clicked | Attach | QR | Creds | Fwd | Repeat | Training | Report Rate |
|---|
Aggregate training assignment status across all participants.
| Training | Type | Assigned | Completed | In Progress | Overdue | Not Started | Completion Rate |
|---|
Identifies potential false positives from email security scanners (Microsoft ATP/Safe Links). Flagged records show automated interactions that may have incorrectly triggered failures and training enrollment.
| # | Campaign | Type | Participant | Sent | Event Time | Time Delta | Whois Org | Confidence | Time Since | Training Status | Also Submitted Creds? |
|---|
Participant-level phishing simulation data with exports for CSV, per-sim breakdowns, heatmaps, and geographic failures.
| # | Name | Division | Email Safety Score | Tier | Reported | Clicked | Creds | Badges |
|---|
Training assignment completion data filtered by entity, name, status, type, and date range.
| # | Name | Division | Assignment | Type | Status | Due date | On time | Score |
|---|
Winners earn Derby Dollars redeemable at the Delta Employee Shop (IceBox). Export the eligible list, send to IceBox, then import their codes back here to email winners.
Import IceBox codes
Upload a CSV from IceBox with columns: Email, Code. Codes will be matched to eligible participants.
| # | Name | Company | Email Safety Score | Tier | Amount | Code | Status |
|---|
Bug reports submitted by testers via the feedback widget's QA mode. Filter by severity, page, or status.
| # | Severity | Page | Description | Reporter | Date | Screenshot | Status | Action |
|---|
View completion data for all bonus activities. Filter by activity or status, then export for detailed analysis.
| # | Participant | Activity | Type | Points | Attempts | Completed | Manual |
|---|
| Reaction | Participant | Comment | Screenshot | Date |
|---|
Configure which notification categories participants can manage on their Profile tab. Categories linked to automated triggers will check participant preferences before sending.
Configure emails that fire automatically when Derby events occur. Each trigger uses an email template and sends to the affected participant(s).
| Trigger | Template | Status | Sent | Actions |
|---|
Trigger activity log
| Timestamp | Trigger | Recipient | Template |
|---|
Create emails from scratch or load a saved template. Compose your message, select your audience, then send or schedule.
Custom merge fields
Add custom fields that can be used in templates. Values are injected at send time.
Scheduled emails
New Banner Message
Filter data to Derby-specific campaigns and date ranges. Turn on to scope the leaderboard to your active Derby.
Entity
Date filters
Campaign type
Campaign name
Training assignment
Manage Derby dates, lifecycle state, and what participants see at each stage.
Dates
Change state
Preview states
Preview what participants see at each lifecycle stage without changing the active state.
Superfan Referral Contest
Manage superfan referral codes. Upload a CSV (Email, Code, Name, Division) or add individually. Codes are 5 uppercase letters.
| Rank | Name | Code | Referrals | Remove |
|---|
Maintenance bypass
Emails listed below can access the platform during maintenance mode.
Upload prior year participant data to track repeat participants. CSV columns: Email, Year, Derby Champion (yes/no), Top Reporter (yes/no), Unphishable (yes/no), Highest Points Earner (yes/no).
| Years | Champion | Top Reporter | Unphishable | Highest Earner |
|---|
Configure the guided walkthrough shown to first-time visitors. Each step can navigate to a specific tab for context.
Configure how points are earned and lost. Changes take effect immediately on save and trigger a full re-score.
Max = (safety actions per sim × sims) + (bonuses: admin trainings × count + all challenge points). 'Demption Training excluded (only assigned on risky behavior).
▼ Scoring actions
Click an action to configure it. Each action has a trigger field from the ZenGuide data and a condition that determines when it fires.
▼ Bonus Activities
Click an activity to configure it. Each activity awards bonus points on completion.
Define prize tiers, badge criteria, and certificate designs. These determine what participants earn for their scores.
▼ Prize Tier Settings
Click a tier to configure it. Tiers determine the prize level participants earn based on their Email Safety Score™.
▼ Badge Settings
Click a badge to configure its criteria, descriptions, and image.
▼ Certificate Template Uploads
Upload custom PNG backgrounds for achievement certificates. Each tier gets its own background. Badges earned are rendered on the same certificate. Recommended size: 11×8.5" landscape (1100×850px).
Prize Tier Certificates
Upload one background per tier. The participant's name, score, and tier are overlaid on download.
| Tier | Certificate background | Preview |
|---|
Preview and customize automated celebration triggers that participants experience during the Derby.
Assign roles to control who can access the Admin tab. Participants get their role automatically. Add Read Only or Admin roles for managers and team members who need access.
| Roles | Assigned by | Actions |
|---|
Email campaign history
| Template | Date sent | Audience | Sent | Opened | Clicked | Bounced | Open % | Click % | Engagement |
|---|
Device & Platform breakdown
How recipients view your emails — based on open and click event User-Agent data.
Email client
Device type
Operating system
Note: Apple Mail Privacy Protection may mask some device data. Percentages based on trackable opens only.
Engagement Heatmap
Best times to send — based on open events by day and hour
Email analytics are updated in real-time via SES event tracking. Open and click rates may take up to 24 hours to fully populate.
Simulation content management
Configure email previews, scam indicators, attachments, and landing pages for each campaign.
| Campaign | Type | Envelope | Indicators | Attachment | Landing Page |
|---|
No simulation content configured yet. Click "+ Add simulation" to get started.