You work as a Network Security Analyzer. You got a suspicious email while working on a forensic
project. Now, you want to know the IP address of the sender so that you can analyze various
information such as the actual location, domain information, operating system being used, contact
information, etc. of the email sender with the help of various tools and resources. You also want to
check whether this email is fake or real. You know that analysis of email headers is a good starting
point in such cases. The email header of the suspicious email is given below:
What is the IP address of the sender of this email?
A.
209.191.91.180
B.
141.1.1.1
C.
172.16.10.90
D.
216.168.54.25
Explanation:
The IP address of the sender of this email is 216.168.54.25. According to the scenario, you want
to know the IP address of the sender so that you can analyze various information such as the
actual location, domain information, operating system being used, contact information, etc. of the
email sender with the help of various tools and resources. You also want to check whether this
email is fake or real. You know that analysis of email headers is a good starting point in such
cases. Once you start to analyze the email header, you get an entry entitled as X-Originating-IP.
You know that in Yahoo, the X-Originating-IP is the IP address of the email sender and in this
case, the required IP address is 216.168.54.25.
Answer options A, C, and B are incorrect. All these are the IP addresses of the Yahoo and
Wetpaint servers.