EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of kalyrox-ai.co.za

Información de Detección

https://kalyrox-ai.co.za/
Detected Brand
Kalyrox AI
Country
International
Confianza
100%
HTTP Status
200
Report ID
223b0ebd-43c…
Analyzed
2026-08-05 23:19

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1CCF27531A251AE3B44A792E5F3B5636F32D2938AC942024583FC83BD0BEBDD4FD26554
CONTENT ssdeep
768:L4arx4uDXIeabjq9AoAV9AvphCg0uf/bUiKDGMn:LXDXIecuf/bU1KMn

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
be2ac1eb5f2a490a
VISUAL aHash
8987878f8ff3f3fe
VISUAL dHash
2b0d3d392dc70726
VISUAL wHash
8187078785e1f1fe
VISUAL colorHash
070010001c0
VISUAL cropResistant
2b0d3d392dc70726

Análisis de Código

Risk Score 79/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Estafa de inversión en criptomonedas
• Objetivo: Inversores minoristas
• Método: Suplantación de plataforma de trading con IA
• Exfil: Endpoint /create_lead/
• Indicadores: Código JS ofuscado, diseño de portal de inversión de alto rendimiento
• Riesgo: Pérdida financiera mediante depósitos fraudulentos

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • unescape
  • unicode_escape
  • base64_strings

📡 API Calls Detected

  • POST

📤 Form Action Targets

  • /create_lead/

📊 Desglose de Puntuación de Riesgo

Total Risk Score
95/100

Contributing Factors

Obfuscated JS
Detected use of base64 and unicode escaping in form submission handling.
Financial Phishing Template
Identified patterns consistent with active investment fraud campaigns.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
Kalyrox AI users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
HTTP POST to backend
Evaluación de Riesgo
HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 35 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Kalyrox AI
Fake Service
Automated AI Trading

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site solicits user PII via a lead-gen form to facilitate follow-up social engineering attacks.

Secondary Method: Obfuscated Exfiltration

Uses encoded payloads to hide where data is being transmitted.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
kalyrox-ai.co.za
Registered
2026-06-19
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.