SafeMode - Analysis: microsoft.userid-81d.ws

EN ES PT

Back to Stats

Visual Capture

No screenshot available

Detection Info

http://microsoft.userid-81d.ws/subscription/3IGiX7E0RaWb4BovKwiMXSGH9-XTzcCx5VEA=/7V0WbSFM0UeGl0J3OzTz5n1Pcy0fKrs6

Detected Brand

Phriendly Phishing

Country

International

Confidence

100%

HTTP Status

200

Report ID

3279ae6c-f4d…

Analyzed

2025-12-25 01:39

Final URL (after redirects)

https://training.phriendlyphishing.com/landing_pages/simulated_phishing_page/story.html

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F8854A9CB181B07946EB6164913F120AB27B285D744AC45CFA7DD8C9BDB894E203BF7C
CONTENT ssdeep	24576:ROhasorB0K85Wh99zVdUPwB4DsB/xuEjAOY1Qs:ghrorB0K85WhhdUPwB4DK50OY1Qs

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ea1538ea97a94617
VISUAL aHash	000000ffffffc100
VISUAL dHash	3231ca9b55c59b3a
VISUAL wHash	000070ffffffcb00

Code Analysis

Risk Score 100/100

Threat Level CRITICAL

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Simulated Phishing Test
• Target: Users of Phriendly Phishing training
• Method: Displaying a page after a simulated phishing link is clicked
• Exfil: No data exfiltration
• Indicators: Brand name and logo visible, message indicating a phishing test
• Risk: LOW - This is a training exercise, not a real phishing attempt