Kryven AI scam warning: fake uncensored tool

🔑 Enhanced Key Takeaways

• •Security researchers identified that Kryven AI's backend API calls are routed directly to Google's Gemini API endpoints, confirming that the 'KRY-5.2' model is a marketing fabrication designed to deceive users seeking uncensored alternatives.
• •Payment processing for the platform is handled through a high-risk third-party gateway that lacks standard PCI-DSS compliance disclosures, posing a significant risk of credit card theft beyond the initial subscription scam.
• •The platform's 'privacy' policy contains boilerplate text copied verbatim from unrelated open-source projects, explicitly contradicting its claims of zero-logging and local-first processing.

🛠️ Technical Deep Dive

• •Frontend architecture: Built using a standard Next.js boilerplate with obfuscated JavaScript to hide API request headers.
• •API Interception: The 'thinking' animation is triggered by a client-side timer that masks the latency of the Gemini API's refusal response when a user inputs restricted prompts.
• •Infrastructure: Hosted on Railway.app using shared ephemeral containers, which prevents the persistence of any user-specific model weights or fine-tuning data, further proving the 'proprietary model' claim is false.

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline