Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/games/2753915549/-Blox-Fruits?privateServerLinkC...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 9 countries across 21 domains to perform 236 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/ecsq8

Effective URL:
https://www.roblox.rw/games/2753915549/-Blox-Fruits?privateServerLinkC...
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Off-brand lookalike domain (roblox.rw) cloning a Roblox game page and reachable only via a newly registered shortener; reported as phishing and flagged for Roblox brand impersonation. Avoid logging in or entering data.

Risk Factors (4)
Impersonation of the Roblox brand on the non-official domain roblox.rw
Phishing threat-intelligence reports on roblox.rw (single-source, unverified) and on entry domain g5.lu
Off-domain funnel: 30-day-old link shortener g5.lu redirecting to an unranked lookalike 'roblox' domain
Page references 'Create Robux' / 'RQBLOX Charts' framing alongside cloned Roblox content, consistent with a Robux-lure scheme
Domain age information unavailable

Details

Page Title

[🎃] Blox Fruits- Roblox

Scan Type

public

Domain Name Analysis

The domain 'g5.lu' uses the Luxembourgish country-code top-level domain (.lu). The registrable portion 'g5' spans 2 characters holding zero vowels versus 1 consonant, along with one digit. Tokenizing the label suggests two words: g, 5. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/ecsq8

Page Load Overview

7.44s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,638 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
718.66.112.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
723.53.40.18Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
73.174.46.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7128.116.31.3Slough, England, United Kingdom
AS22697Roblox
799.84.152.55Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
754.192.35.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.127.97Google · CDNUnited States
AS15169Google LLC
734.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
723.32.239.27Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
23631--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10BD3F9A3FBA5B436E85B82F9A0117554D550D917C90ACC80F0FCB3B82FC8EE36A53956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+qknXc0Kkl2OqAohW5XG/QlGOSeGl7dDfadMc:JMXc0KkcOqAohW5XG/QlGOSeGjDfe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130601:BAqHAAkUiXBUsGrwAABigwDYwJSUFDkIEICBgiACMOA1wBoBIKDbFjMAATgACqJKgRLHwBCAEQhUigGQKvDg6CDV4AlARAZB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b030d3cfcf446ccc
Difference Hash:8e0c8e0e223e1e38
Wavelet Hash:028783c3c3c3cfcf
Color Hash:#2d8649

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data