Phishing is a big problem for non-technical users. Google's Phishing Quiz (https://phishingquiz.withgoogle.com) is a surprisingly good resource.
Of course it could have drive-by malware on it... but so could any link
I think it would have been better if this quiz made up a name and e-mail for the user instead of asking for one though.