SafeMode - Analysis: kalyrox-ai.co.za

Captura Visual

Informações de Detecção

https://kalyrox-ai.co.za/

Detected Brand

Kalyrox AI

Country

International

Confiança

100%

HTTP Status

200

Report ID

223b0ebd-43c…

Analyzed

2026-08-05 23:19

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1CCF27531A251AE3B44A792E5F3B5636F32D2938AC942024583FC83BD0BEBDD4FD26554
CONTENT ssdeep	768:L4arx4uDXIeabjq9AoAV9AvphCg0uf/bUiKDGMn:LXDXIecuf/bU1KMn

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	be2ac1eb5f2a490a
VISUAL aHash	8987878f8ff3f3fe
VISUAL dHash	2b0d3d392dc70726
VISUAL wHash	8187078785e1f1fe
VISUAL colorHash	070010001c0
VISUAL cropResistant	2b0d3d392dc70726

Análise de Código

Risk Score 79/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Golpe de investimento em criptomoedas
• Alvo: Investidores de varejo
• Método: Representação de plataforma de trading com IA
• Exfil: Endpoint /create_lead/
• Indicadores: JS ofuscado, design padrão de portal de investimento
• Risco: Perda financeira através de depósitos fraudulentos

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

unescape
unicode_escape
base64_strings

📡 API Calls Detected

POST

📤 Form Action Targets

/create_lead/

📊 Detalhamento da Pontuação de Risco

Total Risk Score

95/100

Contributing Factors

Obfuscated JS

Detected use of base64 and unicode escaping in form submission handling.

Financial Phishing Template

Identified patterns consistent with active investment fraud campaigns.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

Kalyrox AI users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

HTTP POST to backend

Avaliação de Risco

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
35 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Kalyrox AI

Fake Service

Automated AI Trading

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The site solicits user PII via a lead-gen form to facilitate follow-up social engineering attacks.

Secondary Method: Obfuscated Exfiltration

Uses encoded payloads to hide where data is being transmitted.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

kalyrox-ai.co.za

Registered

2026-06-19

Registrar

Unknown

Estado

Active

Phishing Analysis