Phishing Emails 5

Prompts and answers

• What is the email's timestamp? (answer format: mm/dd/yyyy hh:mm
  06/10/2020 05:58
• Who is the email from?
  Mr. James Jackson
• What is his email address?
  info@mutawamarine.com
• What email address will receive a reply to this email?
  info.mutawamarine@mail.com
• The answer is NOT in X-Originating-Ip
  192.119.71.157
• Perform a WHOIS lookup for the name of the organization
  Hostwinds LLC
• What is the SPF record for the Return-Path domain?
  v=spf1 include:spf.protection.outlook.com -all
• What is the DMARC record for the Return-Path domain?
  v=DMARC1; p=quarantine; fo=1
• What is the name of the attachment?
  SWT_#09674321____PDF__.cab
• What is the SHA256 hash of the file attachment?
  2e91c533615a9bb8929ac4bb76707b2444597ce063d84a4b33525e25074fff3f
• What is the actual file extension of the attachment?
  rar