My organization wants to send out a test phishing email to all employees after a week of security awareness.
I plan on drafting a basic HTML page and including a misspelled link to it in an email with spoofed headers and intentionally incorrect email addresses to see if employees are wary enough to click or not.
I was also planning on embedding IP tracker URLs to track if employees actually clicked the links or not.
Is there a way I can track individual users who click links by attaching their email address to a list?
I originally was planning on using a basic free IP-logger online such as https://grabify.link/ or https://blasze.com/, but this will only track specific IPs and log them. I want to ideally track the number of times the link is clicked and, if possible, grab the email address the phishing email was sent to.
For example, if email@example.com clicked the link, it would tell me John clicked a link.
If firstname.lastname@example.org clicked the link in my email, it would tell me that Alice opened my link.