Suspicious Email Activity
EASY50 points29 solves
During ongoing monitoring of a suspicious online persona, analysts intercepted an email believed to be associated with the same individual previously observed sharing public activity data.
The message does not appear to be a typical phishing attempt, but may indicate involvement in unauthorized access to external systems.
Initial review suggests the email may have originated from infrastructure unrelated to the senderβs claimed identity.
Your task is to analyze the email metadata, identify the true origin of the message, and determine where the email was sent from.
How to get started:
- Download the file
- Investigate
Password: osintchallenges.com
Scope: ipinfo.io/*
bgp.he.net/*
whois.domaintools.com/*
google.com/*
duckduckgo.com/*
π― Submit Your Answer
π‘ Need a hint?
Focus on the email headers. The visible sender may not reflect the true origin of the message.
π Challenge Leaderboard
| Rank | Username | Points | Solved At |
|---|---|---|---|
| π₯ 1 | sar_jay π©Έ FIRST BLOOD | 105 | Apr 5, 2026 - 1:21 PM |
| π₯ 2 | mathcuber | 50 | Apr 5, 2026 - 1:45 PM |
| π₯ 3 | lxl | 50 | Apr 5, 2026 - 3:22 PM |
| 4 | BlackbirdDK | 50 | Apr 5, 2026 - 5:04 PM |
| 5 | XofCyber | 50 | Apr 5, 2026 - 8:44 PM |
| 6 | xanosint | 50 | Apr 5, 2026 - 8:44 PM |
| 7 | wk9k | 50 | Apr 6, 2026 - 12:12 AM |
| 8 | wk9kk | 50 | Apr 6, 2026 - 12:58 AM |
| 9 | danirutman | 50 | Apr 6, 2026 - 2:53 PM |
| 10 | imbadatosint | 50 | Apr 6, 2026 - 10:15 PM |
| 11 | syst3m1ca | 50 | Apr 7, 2026 - 5:54 PM |
| 12 | msparol1899 | 50 | Apr 7, 2026 - 7:16 PM |
| 13 | ADEK | 50 | Apr 8, 2026 - 1:39 PM |
| 14 | Tonifer | 50 | Apr 9, 2026 - 8:07 PM |
| 15 | sleuth_joe | 50 | Apr 10, 2026 - 1:13 PM |
| 16 | duck | 50 | Apr 10, 2026 - 5:00 PM |
| 17 | Nobo99 | 50 | Apr 10, 2026 - 5:37 PM |
| 18 | L0stB0y | 50 | Apr 10, 2026 - 7:03 PM |
| 19 | Perhaps | 50 | Apr 11, 2026 - 12:53 AM |
| 20 | Frostlyte | 50 | Apr 11, 2026 - 7:34 AM |
| 21 | 3vildrk_66687 | 50 | Apr 11, 2026 - 4:49 PM |
| 22 | sdfsdfsdf | 50 | Apr 13, 2026 - 2:15 PM |
| 23 | bitok | 50 | Apr 15, 2026 - 11:18 AM |
| 24 | TollerHecht | 50 | Apr 15, 2026 - 10:12 PM |
| 25 | 103861827 | 50 | Apr 17, 2026 - 3:42 PM |
| 26 | Queen | 50 | Apr 18, 2026 - 9:15 AM |
| 27 | Dark | 50 | Apr 18, 2026 - 1:33 PM |
| 28 | l0uishp | 50 | Apr 20, 2026 - 6:09 PM |
| 29 | FirstTrace | 50 | Apr 20, 2026 - 6:48 PM |
π Community Walkthroughs
Loading walkthroughs...


Loading comments...