SafeMode - Analysis: microsoft.securityresponse.org

Visual Capture

No screenshot available

Detection Info

http://microsoft.securityresponse.org/login/b7sjd5ovpc-9hluobv1gio80xvi0em5g2u0c=/wluk8xglmxkk5x7ddk24rsd-g1owduz6

Detected Brand

Phriendly Phishing

Country

International

Confidence

100%

HTTP Status

200

Report ID

9fa09488-d1f…

Analyzed

2025-12-25 01:38

Final URL (after redirects)

https://training.phriendlyphishing.com/landing_pages/simulated_phishing_page/story.html

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T10B854A9CB180B07946DB6164913F160AB27B289D744AC45CFA7DD8C9BDB894E203BF7C
CONTENT ssdeep	24576:/OhasorB0K85Wh99zVdUPwB4DsB/xuEjAOY1QA:2hrorB0K85WhhdUPwB4DK50OY1QA

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a95e7883dfa0822f
VISUAL aHash	000000ffffffc300
VISUAL dHash	3231c88a5acd9733
VISUAL wHash	000026ffffffc300

Code Analysis

Risk Score 100/100

Threat Level CRITICAL

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Simulated phishing test page.
• Target: Users who have clicked on a simulated phishing link.
• Method: Informing the user that they have clicked on a phishing test.
• Exfil: No data exfiltration.
• Indicators: Clear indication of simulated phishing test.
• Risk: LOW - User is informed of the simulated phishing attempt.