SafeMode - Analysis: confirmationportal.com

Visual Capture

No screenshot available

Detection Info

https://confirmationportal.com/8b6c79f8-24e4-4fdc-beb9-7ba499e4de30/a/2551ce59-f743-4b5a-a0b8-abe65c736c0f/ccp?lid=a7ce6caf-dfde-42c0-bac0-d4b5f07ec85f&lang=pt-br

Detected Brand

CYMI BR

Country

Brazil

Confidence

100%

HTTP Status

200

Report ID

4c703f69-1c5…

Analyzed

2025-12-27 03:35

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1249319DD72C6702257A720B9007F250BF236189E684DC450F16DD8E9BFB8A4A8277F6D
CONTENT ssdeep	1536:kJPEkdjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX+:eHIh8GgP3hujzwbhd3XvSiDQ47GKp

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ad9296cc3a6d92c6
VISUAL aHash	9fdf8381df9bb1df
VISUAL dHash	383c3b3333372737
VISUAL wHash	9fc78381839b918f

Code Analysis

Risk Score 50/100

Threat Level HIGH

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Phishing awareness training simulation
• Target: Employees of Grupo Cymi Brasil
• Method: Educational content explaining how to identify phishing emails
• Exfil: No data exfiltration as it's a simulation
• Indicators: Training material, phishing identification tips
• Risk: LOW - Educational purpose, no real threat