Security Scan Report: www.g5.lu

Redirected to:
https://www.roblox.rw/users/213296865287/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 7 countries across 25 domains to perform 280 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://www.g5.lu/kezaw/

Effective URL:
https://www.roblox.rw/users/213296865287/profile
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Domain roblox.rw imitates Roblox with a copied profile page and Roblox branding, redirected from g5.lu; phishing reports exist though no credential form was found.

Risk Factors (5)
Brand impersonation of Roblox on a non-official domain
Deceptive domain name roblox.rw
Redirect chain from g5.lu to roblox.rw
Single-source phishing threat-intel reports for roblox.rw and g5.lu
Single-source malware association for the hosting IP
Domain age information unavailable

Details

Page Title

saia - Roblox

Scan Type

public

Domain Name Analysis

The domain name 'www.g5.lu' uses the Luxembourgish country-code top-level domain (.lu) and includes subdomain 'www'. Count 2 characters in 'g5' holding zero vowels versus 1 consonant, along with 1 digit. Breaking it apart gives two words: g, 5. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

RQBLOX Charts Marketplace Create Robux Q Search 30 Ada Connection ” saia 2 @saiiiiaaaaa8388320 49 Connections 3 Following Creations Hi = (a7 4 = > 193 Followers About Currently Wearing L C...

Page Load Overview

39.93s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:811 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media46% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
46%
social_media
30%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
92.21.20.140Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
918.66.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
92.16.106.34Akamai · CDNAmsterdam, North Holland, Netherlands
AS20940Akamai International B.V.
9128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
999.84.152.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
92.16.106.31Akamai · CDNAmsterdam, North Holland, Netherlands
AS20940Akamai International B.V.
9142.251.14.97Google · CDNUnited States
AS15169Google LLC
9128.116.13.3Paris, Île-de-France, France
AS22697Roblox
9128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
28031--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T194140A73FA647037A82F65F6E054A718D152E607DA0688D4B0ECF3B91FC6EE3A947409

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:dXq0lHCg7P7k7D7S7r7c7u767S7i727x7J7O7878747+7pDKsAbTF+0D:dXq0lVh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:197420:VAHIMYDBRUEqAAMCATKzgIAIKgRAwxCASIANAANEIcJASIg6CKgBmBMK9wACMgUB8OgBJQwoEbkCkGMAAou2dBEeBIpkdgEB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c3dfc3c3ffff
Perceptual Hash:b446433998ccbced
Difference Hash:e8c8ae341a3e0002
Wavelet Hash:000002dfc3c3ffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data