I’d say these are a bit too obvious. Maybe for the beginner students. You really need to train people not to click on any URL in an email. Unless they really need to, and then show them how to examine the email headers. For URLs, the ones to watch out for are things like mybank.com.-------badguy.com, or tricks with Unicode, etc.