Perform Email Header Analysis

Guided

Part of CySA+: Cyber Security Analyst Topic: Cyber Security Labs

Counts towards

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will perform header analysis of a suspicious email.

Perform an email address verification check by using centralops.net
Attempt to discover an association between the email address discovered by the header analysis of the suspicious email by using four tools and services on the OSINT Framework web site, including That’sThem…
Analyze the suspicious email by using MX Toolbox
Determine who the domain name of the suspicious email address is registered to by using WHOIS
Perform a number registration lookup of the suspicious email by using the American Registry for Internet Numbers
Perform a location lookup of the email address by using IP2LOCATION

Note: Once you begin the lab, you will not be able to pause, save, or exit and then return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.

⏱ About 30 minutes
Counts towards: CompTIA CySA+ (exam CS0-004)

Roadmaps that use this lab

CompTIA CySA+ (CS0-004) — step 3: Log analysis and SIEM
SOC Analyst — career path — step 6: Analyst certification
Threat Hunter — career path — step 3: The analyst certification
Digital Forensics Analyst — career path — step 5: Incident response, certified
Threat Intelligence Analyst — career path — step 2: SOC grounding, certified