What Gridinsoft observed on Kamirai.io
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260831000509-fe4bf6ad
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current review did not reproduce phishing, credential theft, wallet-secret collection, a malicious redirect, malware delivery, or another active harmful object. The reported mail and FTP hostname misconfiguration has been corrected, and the public wallet flow discloses the project contracts and transaction purpose. The token-only audit scope remains a disclosed transaction-risk caveat in this report, but it does not justify continuing an active Gridinsoft security detection. The current Gridinsoft classification is Safe.
Analyst findings
Review 5 documented observations View evidence
The apex returned the current KAMIRAI BNB Chain presale application over HTTPS. HTTP navigation remained on the same project site, and the reviewed public surface did not imitate a third-party login or redirect to an unrelated destination.
-
HTTP status
200 -
Final URL
https://kamirai.io/ - Analyst observation The current public application identified KAMIRAI and linked the same project contracts and social destinations previously reviewed.
The previously reported mail and FTP hostname fall-through was no longer present. Both hostnames returned HTTP 404 and did not serve the presale application.
-
HTTP status
404 - Analyst observation https://mail.kamirai.io/ returned HTTP 404.
- Analyst observation https://ftp.kamirai.io/ returned HTTP 404.
The reviewed purchase flow disclosed the KAMIRAI presale and token contracts and requested a user-confirmed BNB transaction. It did not present a third-party credential form or request a seed phrase, recovery phrase, private key, or account password.
- Page element Displayed presale contract 0x2A899b64B7DB35d7dc46388e5Cc793448b0Ff800.
- Page element Displayed token contract 0x12bfe0251Eb64c6e26d1A264673593D6164ca213.
- Analyst observation No application credential, recovery-phrase, seed-phrase, or private-key receiver was found in the reviewed public flow.
The site continues to link the Cyberscope assessment of the KAMIRAI token contract while the separate presale contract and production wallet flow remain outside that document. This scope limitation is retained as a transaction-disclosure caveat, not as evidence of phishing or a current malicious object.
- Public artifact URL https://www.cyberscope.io/audits/kamirai
- Page element The purchase area links the Cyberscope assessment and separately displays the presale contract.
- Analyst observation The linked assessment identifies token address 0x12bfe0251Eb64c6e26d1A264673593D6164ca213 rather than presale address 0x2A899b64B7DB35d7dc46388e5Cc793448b0Ff800.
No specific malicious URL, malware file, exploit payload, credential receiver, unrelated redirect, or automatic executable download was identified in the reviewed current public flow. The current Gridinsoft scan recorded HTTP 200 and no positive behavior signals.
-
HTTP status
200 - Analyst observation No executable or archive download was exposed by the reviewed public navigation and application code.
- Analyst observation The current first-party scan recorded no positive behavior signals.
Scope and limitations
- No BNB was sent, no live wallet transaction was signed, and no funds were placed at risk during this review.
- The review covered the public apex, the current application and wallet prompts, redirects, the reported mail and FTP hostnames, DNS, TLS, and the linked audit scope; it did not audit private servers, administration, databases, logs, wallets, or unpublished routes.
- The Cyberscope assessment covers the token contract. The separate presale contract and production wallet flow were not independently audited as part of this review.
- The verdict describes the public deployment and exact contracts observed at the recorded time; it does not guarantee future content, contract state, investment performance, or private infrastructure integrity.
