ParrotPost: Phishing Analysis

Walkthrough summary

ParrotPost: Phishing Analysis TryHackMe walkthrough with 13 answered prompts and lab methodology notes.

Sample prompts covered

• According to the IP address, what country is the sending email server associated with?
  Open the walkthrough page to inspect the full answer and command flow.
• If Paul replies to this email, which email address will his reply be sent to?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the value of the custom header in the email?
  Open the walkthrough page to inspect the full answer and command flow.
• What encoding scheme is used to obfuscate the web page contents?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the built-in JavaScript function used to decode the web page before writing it to the page?
  Open the walkthrough page to inspect the full answer and command flow.