Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/users/799224384873/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 27 IPs in 8 countries across 26 domains to perform 270 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/z58x5

Effective URL:
https://www.roblox.rw/users/799224384873/profile
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Cloned Roblox profile served from the lookalike domain roblox.rw (29 days old, unranked) after a short-link redirect; single-source phishing reports on both hosts. Brand impersonation — avoid, no credentials/payment form seen.

Risk Factors (5)
Brand impersonation of Roblox on the non-official domain roblox.rw
Very new domain (29 days) hosting a cloned major-brand page
Multiple single-source phishing threat-intel reports on roblox.rw and g5.lu
Cross-domain redirect from a short-link domain into the impersonating host
Admin/VIP lure text designed to entice users into following off-page links
Domain age information unavailable

Details

Page Title

aosidjasho - Roblox

Scan Type

public

Domain Name Analysis

Domain 'g5.lu' uses the Luxembourgish country-code top-level domain (.lu) while skipping any subdomain. Count 2 characters in 'g5' containing 0 vowels alongside 1 consonant, plus 1 digit. Segmentation suggests two words: g, 5. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/z58x5

Page Load Overview

2.03s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,702 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media60% confidence
Type: spa
Method: structural

All Detected Categories

social_media
60%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
103.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1023.216.154.56Akamai · CDNDublin, Leinster, Ireland
AS20940Akamai International B.V.
10184.25.102.99Akamai · CDNMarseille, Provence-Alpes-Côte d'Azur, France
AS20940Akamai International B.V.
10128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1018.64.211.103Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1023.53.40.41Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10142.250.154.97Google · CDNUnited States
AS15169Google LLC
10128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
1018.64.211.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
27027--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12E141A73FAA47036A81F66F2A055B708D552E603DA0A88D4B0ECF3B51FC9EE37A47505

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kqX+P0l6RiK8e7a7s72797qDKrwu1bToQOhZRAmqf0Kjif:3Xq0lO8e7a7s72797qDKsAbTzf0D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:192819:kaDC3CsTVdAgpRUMEgAEjQ2aBIEwQAAAA8iMAhA4CywUgwQpoQQU4kEDsQgJQUEgwoA1rpCAAAFCgQgzB7uGQehrWSSBAAoR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000d3dfc7c7ffff
Perceptual Hash:b447433299cdbcb4
Difference Hash:e8c8a636ac0c0004
Wavelet Hash:000000dfc3c7ffff
Color Hash:#879ac5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data