Security Scan Report: u.gy

Redirected to:
https://www.roblox.com.et/games/18503970677/Neko-Girl-Survival?private...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 5 countries across 24 domains to perform 239 HTTP transactions. The main domain is u.gy and was registered 4 months ago.

Submitted URL: https://u.gy/kcUNta

Effective URL:
https://www.roblox.com.et/games/18503970677/Neko-Girl-Survival?private...
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Clone of the Roblox site on lookalike domain roblox.com.et, reached via a shortener, with a corroborated phishing threat-intel hit — impersonation of Roblox; do not enter credentials.

Risk Factors (5)
Brand impersonation of Roblox on a non-official ccTLD domain
Multi-source phishing threat-intel match on the serving domain
URL shortener used to obscure the destination domain
Lookalike 'Sign Up' / account-redirect links hosted on the impostor domain
HIGH IDS alert: ET DROP Spamhaus DROP listed traffic
Domain age information unavailable

Details

Page Title

Neko Girl Survival 😺 - Roblox

Scan Type

public

Domain Name Analysis

Within the Guyanese country-code top-level domain (.gy), 'u.gy' is registered while skipping any subdomain. The second-level label 'u' is 1 characters long holding one vowel versus 0 consonants. Word splitting yields one word: u. No strong language cues emerged from the frequency lists.

Screenshot

R&@BLOX Charts Marketplace Create Robux Q Search Sign Up Neko Girl Survival By Simple Games to Play Maturity: Mild x Favorite | About Store Servers Description Fight off wave after wave of Neko...

Page Load Overview

5.41s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,360 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35202.170.75.201Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
6172.66.43.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.66.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
618.64.211.118Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
63.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
654.192.35.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6192.178.183.97Google · CDNUnited States
AS15169Google LLC
634.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6128.116.13.3Paris, Île-de-France, France
AS22697Roblox
23935--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3B3B7A3BB65B432E45F97F5A011A654C442EA17CA0AC9D0F0ECB3782FC9DE36E43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4dcXDHB0K6IHFZVtBUgw8lmmphflZdlKaUjMtaXpjWN/5qrWw7ScfHSr12fcqt4E:+cXDNvlZ/VgjWNUr37vfcC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:114435:BApMyABwT5EjIxFQdMXFEQAICCaAiCIIyaCBBQiDBgImBAjBDaYIJAIgCH2LR4DohQVRwbyfEQgUGZAH8B0kR0anIeg6iYMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03012cfcfcd45cd
Difference Hash:9e1c9e1e201c1816
Wavelet Hash:02868283cfcfcfe3
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data