Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/users/679364184689/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 6 countries across 25 domains to perform 265 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/93uwy

Effective URL:
https://www.roblox.rw/users/679364184689/profile
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 87%

9
Risk Score

Clone of Roblox served from the non-official domain roblox.rw after a redirect from g5.lu; both hosts carry phishing threat-intel reports. Do not log in or interact.

Risk Factors (5)
Brand impersonation of Roblox on a domain it does not own
Multiple single-source phishing threat-intel reports on the final and entry domains
Cross-domain redirect from a shortener-type host (g5.lu) to a lookalike branded domain
Title/og tags claim Roblox on a mismatched, unranked hostname
Fabricated user-profile content presented on a non-official domain
Domain age information unavailable

Details

Page Title

itz_sigmaboy - Roblox

Scan Type

public

Domain Name Analysis

The domain name 'g5.lu' uses the Luxembourgish country-code top-level domain (.lu). Count 2 characters in 'g5' holding zero vowels versus 1 consonant, along with 1 digit. Segmentation suggests 2 words: g, 5. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/93uwy

Page Load Overview

11.96s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:863 chars
Detector Agreement:80%

Website Classification

Primary Category

adult content77% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
77%
cryptocurrency blockchain
50%
social media network
37%
social_media
30%
entertainment media
28%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
83.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
823.209.125.167Akamai · CDNHaarlem, North Holland, Netherlands
AS20940Akamai International B.V.
818.64.211.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
818.64.211.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
82.16.238.19Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
8142.251.13.97Google · CDNUnited States
AS15169Google LLC
8128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
8128.116.13.3Paris, Île-de-France, France
AS22697Roblox
26530--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1090419A3FAA47037A81F66F2A055B604D512E603DA49C8D4B0ECF3751FCAEE37A47506

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:koX+P0l6Ri91x7b7/7GDKrwu1bToQOhBRAmwk0Kjif:ZXq0lR1x7b7/7GDKsAbTVk0D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:186906:IGLSIBBMIDDjVQyGFlhzFQLMDocYXAMwSSmMgZiMECg2UCEUsmDAwMgEMnBgwJqDxBAggmSoNUHEoEGgmEBgVqgIDAixwi5E

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000093dfdfcfffff
Perceptual Hash:b8464331cdccbccd
Difference Hash:e8c83636b8ba0800
Wavelet Hash:000000cf8f8fffff
Color Hash:#6653ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data