SafeMode - Analysis: confirmationportal.com

Visual Capture

No screenshot available

Detection Info

https://confirmationportal.com/8b6c79f8-24e4-4fdc-beb9-7ba499e4de30/a/4f720135-df4e-4481-bf5b-caa4a1411ad1/ccp?lang=pt-BR&lid=a2991c2f-5fac-44ee-873c-9ed50ea1351c

Detected Brand

CYMI BR

Country

Brazil

Confidence

100%

HTTP Status

200

Report ID

887dcd8b-9cf…

Analyzed

2025-12-27 03:35

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1249319DD72C6702257A720B9007F250BF236189E684DC450F16DD8E9BFB8A4A8277F6D
CONTENT ssdeep	1536:kJPEkdjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX+:eHIh8GgP3hujzwbhd3XvSiDQ47GKp

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ad9296cc3a6d92c6
VISUAL aHash	9fdf8381df9bb1df
VISUAL dHash	383c3b3333372737
VISUAL wHash	9fc78381839b918f

Code Analysis

Risk Score 50/100

Threat Level HIGH

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Phishing simulation email.
• Target: Employees of CYMI BR
• Method: Training employees on how to recognize phishing emails
• Exfil: No data exfiltration.
• Indicators: This is a training exercise, not a real attack.
• Risk: LOW - This is a controlled simulation.