ScanMalware.com

Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/users/788171715760/profile
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5e3ae243-491b-4956-8c00-45c6655f3ccaDomain and IP registration (RDAP)/api/v1/rdap/5e3ae243-491b-4956-8c00-45c6655f3ccaHow often this domain was scanned/api/v1/domain/stats/g5.luScan history for this domain/api/v1/domain/history/g5.lu?limit=15
This website contacted 25 IPs in 6 countries across 27 domains to perform 285 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/sqnwb

Effective URL:
https://www.roblox.rw/users/788171715760/profile
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Roblox profile page on lookalike domain roblox.rw, reached via short-link redirect from g5.lu; both domains carry phishing reports. Do not log in or sign up.

Risk Factors (5)
Brand impersonation of Roblox on non-official domain roblox.rw
Phishing threat-intel reports on roblox.rw and on redirector g5.lu
Short-link (g5.lu) cross-domain redirect to the impersonating host
Unranked domain presenting a major brand's identity
Cloned Roblox profile/navigation UI with Sign Up and Login entry points
Domain age information unavailable

Details

Page Title

として - Roblox

Scan Type

public

Domain Name Analysis

Domain 'g5.lu' uses the Luxembourgish country-code top-level domain (.lu). The second-level label 'g5' is 2 characters long split between zero vowels and 1 consonant; bonus characters include 1 digit. Splitting it apart reveals 2 words: g, 5. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/sqnwb

Page Load Overview

33.25s
Total Load Time
6.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,422 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network72% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
72%
cryptocurrency blockchain
68%
adult content
39%
technology software
38%
entertainment media
33%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
1123.48.23.37Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1123.197.84.158Akamai · CDNRome, Lazio, Italy
AS20940Akamai International B.V.
1123.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
11128.116.13.3Paris, Île-de-France, France
AS22697Roblox
1199.84.152.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1123.207.210.91Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
11192.178.183.97Google · CDNUnited States
AS15169Google LLC
11128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1123.207.210.87Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
28525--

Detected Technologies6

X-UA-Compatible
100%
Open-Graph-Protocolvprofile
100%
Google-AnalyticsvClassic
100%
Nginx
40%
HSTS
40%
Google Analytics
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17E343B73BAA43037A86B65F6A0607708D552E607DA4685D4B1FCF3B90FC6EE3AD43409

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:vXq0l0Tx7i7d7G7L73g7R7W7Z7l7X737v7D7h727s7f75WXb/LMDKsAbT1V0D:vXq0lf0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:230960:A0AGAJAMSrk1UQshWB7hcSoRKkGWGUkiYVkQPglBQORhhIgGgigQ4IIVccEhhQAIYQtciCyHCgaAKAIgmbwaY4IWWrEcwMP0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000d3dfcfc3ffff
Perceptual Hash:b41647619c9c7d9c
Difference Hash:c8c8a6349a9a0400
Wavelet Hash:000000dfc7c3ffff
Color Hash:#783a5b

Other Hashes

Crop Resistant:c8c8a6349a9a0400,87c7a3090987a626

Scan History

Scan history not available

Unable to load historical scan data