Security Scan Report: looker-hosted.amper.xyz

Redirected to: https://looker-hosted.amper.xyz/login

Site favicon
Submitted: Mar 1, 2026, 2:13:28 AMCompleted: Mar 1, 2026, 2:14:54 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 1 HTTP transaction. The main domain is looker-hosted.amper.xyz and was registered NaN years ago.

Submitted URL: https://looker-hosted.amper.xyz

Effective URL: https://looker-hosted.amper.xyz/loginRedirected

The Cisco Umbrella rank of the primary domain is #477,483 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Phishing login page impersonating Looker; do not enter credentials.

Risk Factors
Credential harvesting login form
Brand impersonation of Looker on an unrelated domain
Low ranking for a high‑profile brand
Domain age information unavailable

Details

Page Title

Log in

Scan Type

public

Language

🇺🇸

English

(48% confidence)

Category

documentation technical

(34%)

Domain Information

Domain 'looker-hosted.amper.xyz' uses the open generic top-level domain (.xyz) with subdomain 'looker-hosted'. The registrable portion 'amper' spans 5 characters holding 2 vowels versus 3 consonants. Segmentation suggests two words: am, per. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://looker-hosted.amper.xyz

Page Load Overview

13.52s
Total Load Time
61
HTTP Requests
5
Domains
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:48%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:48%
Script Type:Latin
Text Length:1,208 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical34% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
34%
government public service
33%
technology software
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13108.138.7.17United States
1254.192.35.125United States
AS16509Amazon.com, Inc.
12216.58.206.78United States
AS15169Google LLC
1254.192.35.99United States
AS16509Amazon.com, Inc.
1235.199.10.170Washington, District of Columbia, United States
AS396982Google LLC
615--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186658DA1D2B43DA26E3674ABF0C5A405BB6D8543FC4A4CB0F42DDE89ACD5505322BF6C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:zFL7A49q6PJsNV1fb8qOhXqN6cTyDQtKNZ9SmYPGycCJ/doE4aGL+P1EC5AgEN6d:zhsMq6PJsNLbCXqN6cODQtKs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1508616:cjBJAHIwoJSSvAMciEI4hHQDiECw0HszEBo0JsTBADhTBpUaDINQRM4EASIooQAAMwIEMCAlAOBkkgBkYGApJG0FOFDDUgjh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ffc7e7ffffff
Perceptual Hash:b366ccc93398ccc9
Difference Hash:000c000c0c000800
Wavelet Hash:fce4e4c4070f0f0f
Color Hash:#2d864c

Other Hashes

Crop Resistant:000c000c0c000800

Scan History

Scan history not available

Unable to load historical scan data