SafeMode - Analysis: microsoft.userid-81d.ws

EN ES PT

Back to Stats

Visual Capture

No screenshot available

Detection Info

http://microsoft.userid-81d.ws/subscription/qc94e6wkiygxzp05kwbf-dptvpdqkbaq8wu0=/kqbqr7tmj2eqky-hxlqv3njw96cpylm7?is_automation=false

Detected Brand

Phriendly Phishing

Country

International

Confidence

100%

HTTP Status

200

Report ID

d6c1adcb-68c…

Analyzed

2025-12-25 01:39

Final URL (after redirects)

https://training.phriendlyphishing.com/landing_pages/simulated_phishing_page/story.html

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T19C854A9CB181B07946EB6164913F120AB27B285D744AC45CFA7DD8C9BDB894E203BF7C
CONTENT ssdeep	24576:nOhasorB0K85Wh99zVdUPwB4DsB/xuEjAOY1Qn:OhrorB0K85WhhdUPwB4DK50OY1Qn

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a95e7883dfa0822f
VISUAL aHash	000000ffffffc300
VISUAL dHash	3231cc8a5acd9733
VISUAL wHash	000064ffffffc300

Code Analysis

Risk Score 100/100

Threat Level CRITICAL

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Simulated phishing test
• Target: Users undergoing phishing training
• Method: Simulated click on a phishing link, leading to this page
• Exfil: No data exfiltration occurs, it's a training exercise
• Indicators: Phriendly Phishing logo, message indicating a simulated test
• Risk: LOW - No real threat, educational purpose only