Security Scan Report: g5.lu

Redirected to:
https://www.roblox.rw/games/16732694052/Fisch-VENUE-ENCORE?privateServ...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 7 countries across 21 domains to perform 238 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/y2vkt

Effective URL:
https://www.roblox.rw/games/16732694052/Fisch-VENUE-ENCORE?privateServ...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Clone of a Roblox game page served from the non-official, ~30-day-old domain roblox.rw reached via a shortener redirect, with phishing reports on the chain. No credential form seen, but brand impersonation makes it unsafe.

Risk Factors (4)
Impersonation of the Roblox brand on a non-Roblox domain (roblox.rw)
Very new registration (~30 days) and unranked domain used to host a clone of a major brand's page
Three single-source phishing threat-intelligence reports tied to this redirect chain
Cross-domain redirect from a shortener host into a private-server-link lure, typical of game-account phishing funnels
Domain age information unavailable

Details

Page Title

Fisch 🎸 [VENUE ENCORE]- Roblox

Scan Type

public

Domain Name Analysis

Within the Luxembourgish country-code top-level domain (.lu), 'g5.lu' is registered with no subdomain. Count 2 characters in 'g5' containing 0 vowels alongside one consonant; it also includes 1 digit. Splitting it apart reveals 2 words: g, 5. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/y2vkt

Page Load Overview

7.46s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,376 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
adult content
32%
documentation technical
27%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35198.251.82.252Miami, Florida, United States
AS53667FranTech Solutions
718.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
723.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
723.53.41.80Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7128.116.31.3Slough, England, United Kingdom
AS22697Roblox
723.194.190.199Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
754.192.35.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7192.178.183.97Google · CDNUnited States
AS15169Google LLC
7128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
734.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
23830--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2D30AA3FBA5B436E85B83F5A0117554D550D917C90AC880F0FCB3B82FC9EE3AA53952

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+qQ41REXc0Kml1Oq1+shN5xOGCgn8uCL4E7dDfaZMc:JQXc0KmvOq1+shN5UGCgn8uCL4yDfi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130649:AaxIMABKECY6JZlr8xiQCS6MCKcJoCGAgCZA1BPOECEAAGwjEASECEwAAA/q1yggFNrwAAWAjULYkWAAEoBI1FKy0+Q5ABJ0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b030c6cfcb1969cd
Difference Hash:9e2c9e1e223e3e0e
Wavelet Hash:02838383c3dfcfe3
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data