Security Scan Report: g5.lu

Redirected to:
https://www.roblox.com.bn/games/14153443454/Meet-a-neko?privateServerL...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 6 countries across 21 domains to perform 240 HTTP transactions. The main domain is g5.lu.

Submitted URL: https://g5.lu/3fxeb

Effective URL:
https://www.roblox.com.bn/games/14153443454/Meet-a-neko?privateServerL...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 82%

9
Risk Score

Lookalike Roblox page on roblox.com.bn, reached via a phishing-flagged redirector, impersonates the Roblox brand; host IP carries a rhadamanthys malware indicator. Avoid interaction.

Risk Factors (5)
Impersonation of the Roblox brand on a non-official, lookalike domain (roblox.com.bn vs roblox.com)
Domain flagged for phishing by threat intelligence
Content-malware (rhadamanthys) indicator associated with the host address
Redirect chain originating from a domain also reported for phishing
Roblox-branded download/installer prompts on an unofficial host
Domain age information unavailable

Details

Page Title

Meet a neko!- Roblox

Scan Type

public

Domain Name Analysis

Within the Luxembourgish country-code top-level domain (.lu), 'g5.lu' is registered while skipping any subdomain. The core label 'g5' covers 2 characters with zero vowels and one consonant; it also includes one digit. Segmentation suggests two words: g, 5. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g5.lu/3fxeb

Page Load Overview

13.58s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,174 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media68% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
68%
healthcare medical
52%
adult content
44%
corporate
35%
technology software
26%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
823.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
823.32.239.82Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
83.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8128.116.31.3Slough, England, United Kingdom
AS22697Roblox
82.16.168.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
854.192.35.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8142.250.154.97Google · CDNUnited States
AS15169Google LLC
8128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
834.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
24030--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180D309A3BB95B437E45B83F9A0127544D550D51BC90AC880F0FCB3B82FC8EE3AA53956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:KqMxXc0K5lVOqgB1u4keFBQKDCSxE2OEn7HDfBpMc:VUXc0K5TOqgB1u4keFBQKDCS5OETDf3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135093:ICQKAIwAggQWMCMQQO1kjCgIiINmuGwcDgMgGCRGJg0gC4pkAKRQZLgIhHHDGAhxCQhAICGQAERIMIAYC4gLDFBnAITSgRgV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03012cfcfcd49c7
Difference Hash:9e1c9e9e221c0a3a
Wavelet Hash:02868283c7dfe3cf
Color Hash:#d25c2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data