Forum Discussion

lfk73's avatar
lfk73
Brass Contributor
Feb 19, 2026

Text formatting issue with URL Hyperlinking in phishing campaign indicators.

I am running some phishing campaigns and while editing a payload i added a URL hyperlinking indicator.  I type in the text for the indicator and include some empty lines.  However, when it's previewed and in the actual email extra lines are removed.  This makes it look all crammed together and not very readable.  Any idea how i can include empty lines to break it up?

 

 

 

attack simulation training

1 Reply

  • Pbv85's avatar
    Pbv85
    MCT
    Mar 28, 2026

    Hi lfk73​ 

    This is very much an expected behavior  in Defender Office 365 Attack Simulation. The reason is it’s due to how the payload editor sanitizes whitespace.

    All empty lines and line breaks are removed and the content is rendered as plain text or limited HTML not a rick text.  This design is intentional to keep simulations consistent and prevent formatting tricks that wouldn’t resemble real-world phishing emails.

    Only separators like - or . can be used. The best option is to reduce the text in single line and adding a textual line "-----------------------" as separator.

    There is no other options as the HTML Tags both <br> and <p> will not work.

     

    If you find the answer useful, please do not forget to like and mark it as a solution🙂