DEV Community

Mudacumura Brunoblaise
Mudacumura Brunoblaise

Posted on

Who is it PicoCTF 2023

who is it

100 points

AUTHOR: JUNIAS BONOU

Description
Someone just sent you an email claiming to be Google's co-founder Larry Page but you suspect a scam.
Can you help us identify whose mail server the email actually originated from?
Download the email file [here]. Flag: picoCTF{FirstnameLastname}


Looking into the .eml file its not very hard to see that the only IP address there is the attackers IP.

I tried for so long with many different websites to lookup either the mail or the IP and only https://www.whatismyip.com/ip-whois-lookup/ had the name of the person with the relevant IP: 173.249.33.206 and it's

Wilhelm Zwalina
Enter fullscreen mode Exit fullscreen mode

So the answer is:

picoCTF{WilhelmZwalina}

Top comments (0)