Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/games/95051309591921/Talk-to-AI-Yumiko?privateSe...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 35 IPs in 7 countries across 21 domains to perform 232 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/h7uha

Effective URL:
https://www.roblox.rw/games/95051309591921/Talk-to-AI-Yumiko?privateSe...
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Cloned Roblox game page served from roblox.rw after a redirect from short-lived g5.lu; both domains are reported as phishing. No credential/payment form on this capture, but the brand impersonation plus phishing reports warrant avoiding it.

Risk Factors (5)
Brand impersonation of Roblox on the non-official domain roblox.rw
Phishing threat-intelligence report on the final page domain roblox.rw
Phishing threat-intelligence report on the redirecting shortener g5.lu (30 days old)
Cross-domain redirect from an unrelated shortener into a cloned brand page
Non-functional 'Sign Up' anchor link typical of scraped/cloned pages
Domain age information unavailable

Details

Page Title

Talk to AI Yumiko💬- Roblox

Scan Type

public

Domain Name Analysis

You're looking at domain 'g5.lu' on the Luxembourgish country-code top-level domain (.lu). The registrable portion 'g5' spans 2 characters containing 0 vowels alongside one consonant; bonus characters include 1 digit. Splitting it apart reveals 2 words: g, 5. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/h7uha

Page Load Overview

4.63s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,274 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media48% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
48%
corporate
35%
technology software
32%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
618.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
618.64.211.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
63.174.46.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
618.64.211.88Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
654.192.35.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
634.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
23235--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165C3F9A3FBA5B436E45B83F9A0217554D550D917C90AC880F0FCB3B82FC9EE36A53952

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:+qQwzX63T0KRZVtBUgw8lmmphq9lvOqLkYQddw+mRNc6jM8DXh+n5q/w7ScfHSNx:+q/zXc0KylvOqJamR+8+MI7dDfaBMc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:128092:xQBSbwxUyJVgDhUQEESSAkCQHAMBB8gDUgCii8IYZCJANDjqGgBEDIQAAI0CBhJA36YhBAbJMgMBANIIqMANQZxKKDiAJE2g

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c783c7ffffffff
Perceptual Hash:b03090c7cf4d6dc7
Difference Hash:9e1c1e1e221c161a
Wavelet Hash:02878383cfcfc3e3
Color Hash:#53aca6

Scan History

Scan history not available

Unable to load historical scan data