Security Scan Report: wlpconnect.nu

Redirected to:
https://www.wlpconnect.nu/
Site favicon
Submitted: Sep 28, 2026, 1:50:23 AMCompleted: Sep 28, 2026, 1:51:05 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Dutch process-technology learning portal with a same-origin SSO login form. No Indicators of Compromise, malware, exfiltration or impersonation detected, but the credential form on an unranked, unknown-age domain warrants caution.

Risk Factors (3)
Credential-collecting login form on a domain with no established reputation and no published registration date
Multiple password fields (5) across two forms, including a password-request form, on an unverified portal
Page references educational institutions (Twente, Rotterdam) while hosted on an unrelated, unranked .nu domain
Safety Factors (5)
Login form is the site's own, same-origin submission to /home; no cross-origin form action or credential exfiltration
No Indicators of Compromise, no YARA malware patterns, no network IDS alerts, no malicious-kit roster match
No payment fields and no disguised/hidden password fields
Site displays its own brand (WLP / Werkend Leren in de Procestechniek) matching its domain rather than impersonating another entity
Classifier labels the content as education/learning (66%) with no malicious category signal
Domain age information unavailable

Details

Page Title

Werkend Leren in de Procestechniek - Welkom

Scan Type

public

Domain Name Analysis

Domain 'wlpconnect.nu' uses the .nu country-code top-level domain without a subdomain. The registrable portion 'wlpconnect' spans 10 characters split between two vowels and 8 consonants. It segments into 3 words: w, lp, connect. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wlpconnect.nu

Page Load Overview

8.45s
Total Load Time
852 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

Text Length:336 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning66% confidence
Type: webapp
Method: ml+structural

All Detected Categories

education learning
66%
documentation technical
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9108.138.26.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6108.138.26.88Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6108.138.26.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6108.138.26.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
274--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168D1F0516CEAC576821B58D1E461EB26A994E20BD311CC4CB3FC87E85FE7FCC8C56864

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Im/OXpDHv8xP9A/35ISLVaW2v+vZKHAnxNbrg8bOEJIJwAp9kD7Gvf9F+YraXW4J:ctgWIK8W2v+hzbhOEJ6rsfGDSZAIT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6361:gwWiBqQAKKTCsADAAIMAiBRJ8IsIwBkIABIgEAggISEFJE4AkeWSBCNagQwQuDoGKAZYiEBASI4OQAgAgBJIhWUAgBEGARAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010fffffffffe00
Perceptual Hash:d70a0bde7aa58293
Difference Hash:e8e1c0c40c00c241
Wavelet Hash:0000ffffffff0000
Color Hash:#c1e06c

Scan History

Scan history not available

Unable to load historical scan data