Phishing Analysis 2 — Blue Team Labs Online
Scenario — Put your phishing analysis skills to the test by triaging and collecting information about a recent phishing campaign.
Tools used;
- Text Editor.
- Thunderbird — can be used in either linux or windows OS.
Q. What is the sending email address?
Q. What is the recipient email address?
Q. What is the subject line of the email?
A. Your Account has been locked
Q. What company is the attacker trying to imitate?
A. Amazon
Q. What is the date and time the email was sent?
- Open the file using a text editor
A. Wed, 14 Jul 2021 01:40:32 +0900
Q. What is the URL of the main call-to-action button?
Q. Look at the URL using URL2PNG. What is the first sentence (heading) displayed on this site? (regardless of whether you think the site is malicious or not
A. The page you are trying to access cannot be loaded
Q. When looking at the main body content in a text editor, what encoding scheme is being used?
A. Base 64
Q. What is the URL used to retrieve the company’s logo in the email?
Q. For some unknown reason one of the URLs contains a Facebook profile URL. What is the username (not necessarily the display name) of this account, based on the URL?
A. amir.boyka.7
