Phishing Email Analysis: A Comprehensive Guide

Stefan Bargan
CyberScribers
Published in
4 min readMar 31, 2024

--

Yesterday I was going through my spam emails and I saw an email that caught my interest. Today, I want to share my experience of analysing a phishing email from my spam emails.

Image Credit

The Subject Line for this phishing email is — “お問い合わせ — GET BITCOIN URGENTLY[確認用]”. Now, looking at it straight up, it gave me some fishy vibes as it’s in a different language (Japanese in this case) and it talks about Bitcoin.

This phishing email came through my Gmail, so I can easily use the tools built-into Gmail in order to gather a bit more information about where this email is coming from.

Show original Gmail

For the next part, I will be using WhoIs from DomainTools. I want to have a look at the domain where this email came from.

DreamOnline.co.jp

Looking at the domain, it seems that they used a legit email provider for this domain, so there is not much to go from there. Next up, we can look at the email itself to see what can be gathered from there (I tried to check the email itself for anything useful, but that…

--

--

Stefan Bargan
CyberScribers

Pursuing MSc in Cybercrime & Security | Cybersecurity Writer | Security Analyst @ Nettitude