Security Scan Report: u.gy

Redirected to:
https://www.roblox.com.et/games/116800853527473/BACKROOMS-Kat-Infectio...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 6 countries across 24 domains to perform 240 HTTP transactions. The main domain is u.gy and was registered 4 months ago.

Submitted URL: https://u.gy/RkTBJI

Effective URL:
https://www.roblox.com.et/games/116800853527473/BACKROOMS-Kat-Infectio...
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Clone of Roblox served from look-alike domain roblox.com.et, flagged as phishing by two threat feeds with a HIGH IDS alert; do not sign in or download anything here.

Risk Factors (5)
Domain presents itself as the Roblox brand on a non-official domain (roblox.com.et instead of roblox.com)
Phishing threat-intel match on roblox.com.et corroborated by 2 independent feeds
HIGH-severity IDS alert (ET DROP Spamhaus DROP listed traffic)
Cross-domain redirect from a link shortener concealing the final destination
Host domain absent from Cisco Umbrella top 1M while claiming a major brand
Domain age information unavailable

Details

Page Title

[🎃] Kat Infection - Roblox

Scan Type

public

Domain Name Analysis

The domain name 'u.gy' uses the Guyanese country-code top-level domain (.gy) and has no subdomain. The second-level label 'u' is 1 characters long containing one vowel alongside zero consonants. Word splitting yields 1 word: u. No strong language cues emerged from the frequency lists.

Screenshot

R&BLOX Charts Marketplace Create Robux [@] Kat Infection By Notif's cave & Maturity: Mild KAT INFECTION About Store Servers Description Kat Infection is a team based game where there are Infe...

Page Load Overview

12.13s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,717 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
entertainment media
28%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36202.170.75.201Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
6172.66.40.250Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
618.64.211.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
63.174.46.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6128.116.31.3Slough, England, United Kingdom
AS22697Roblox
654.192.35.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6192.178.183.97Google · CDNUnited States
AS15169Google LLC
634.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
24035--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2B3C8A3BB65B432E45F83F5A0116654D542EB1BCA0AC9D0F0ECB3782FC99E36E43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:z5UXDHB+K6IHmZVtBUgw8lmmphflIESZa2njM/QXUzZXcqEWw7ScfHSr12fcqt4E:FUXDvalIZvozZvE37vfcC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117362:aQApAKICJKEhbhUAaSwiEGI4lAghsAVQwyzLFBkuAziS0ChoLE0NYgQAGnlBlthmRaCpgIawMOIAUgFMj8AG05wLAMJaQqC2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03031cfcfc744cd
Difference Hash:9e1c8e0e302c2036
Wavelet Hash:02868283c7dfdfc3
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data