Security Scan Report: g5.lu

Redirected to:
https://www.roblox.com.pt/users/986625031023/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 6 countries across 25 domains to perform 259 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/pekef

Effective URL:
https://www.roblox.com.pt/users/986625031023/profile
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

A Roblox-branded profile cloned onto the non-official domain roblox.com.pt, reached via a link shortener, with phishing reports on both hosts. No credential form was found, so treat it as brand impersonation rather than a harvesting page.

Risk Factors (4)
Brand impersonation: Roblox branding and profile layout served from a non-official domain (roblox.com.pt)
Single-source phishing reports against roblox.com.pt and against the g5.lu redirector
Cross-domain redirect from a link shortener obscures the true destination
No domain reputation (unranked) and no published registration date for the destination
Domain age information unavailable

Details

Page Title

Tractorpurples383838 - Roblox

Scan Type

public

Domain Name Analysis

The domain 'g5.lu' uses the Luxembourgish country-code top-level domain (.lu) without a subdomain. The second-level label 'g5' is 2 characters long holding zero vowels versus 1 consonant, notching one digit. Breaking it apart gives two words: g, 5. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/pekef

Page Load Overview

5.08s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:876 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media60% confidence
Type: spa
Method: structural

All Detected Categories

social_media
60%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
1023.48.23.176Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1023.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1018.64.211.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10128.116.31.3Slough, England, United Kingdom
AS22697Roblox
1023.45.168.121Akamai · CDNBrisbane, Queensland, Australia
AS20940Akamai International B.V.
1023.45.168.131Akamai · CDNBrisbane, Queensland, Australia
AS20940Akamai International B.V.
10142.251.110.97Google · CDNUnited States
AS15169Google LLC
10128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1034.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
25925--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13D041AA3FAA47036A81F66F2E055B604D412E603DA49C8D4B0ECF3751FC9EE37A87516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+UX+P0l6Ri5GLDKrwu1bToQOh9RAmw60Kjif:bXq0l9GLDKsAbT160D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184398:BI5YIKD1qUAYCk04BMKbgKtBrQ0CiRV8BQAQQg+EQEEoIByD0cgkIiAGBuEC0oQWiAhJAUuEYYocMQRAwdGlMDSeYAqEoAA2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000083dfffffffff
Perceptual Hash:b43643c3999cbccc
Difference Hash:e8c8b63618000000
Wavelet Hash:0000008f83ffffff
Color Hash:#611f93

Other Hashes

Crop Resistant:e8c8b63618000000

Scan History

Scan history not available

Unable to load historical scan data