Security Scan Report: webmail.heplatform.nl

Redirected to:
https://webmail.heplatform.nl/owa/auth/logon.aspx?replaceCurrent=1&url...
Submitted: Apr 19, 2026, 10:54:20 AMCompleted: Apr 19, 2026, 10:55:28 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 8 HTTP transactions. The main domain is webmail.heplatform.nl and was registered NaN years ago.

Submitted URL: https://webmail.heplatform.nl

Effective URL: https://webmail.heplatform.nl/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail.heplatform.nl%2fowa%2fRedirected

AI Security Verdict

Moderate Risk

Confidence: 95%

5
Risk Score

The site impersonates Outlook, collects credentials on an unranked domain, and shows strong brand‑impersonation signals – confirmed phishing scam.

Risk Factors
Unranked domain claiming to be a major brand
Login form collecting credentials on non‑official domain
Brand name displayed without disclosure of affiliation
Safety Factors
Established domain (6148 days old) with no strong malicious indicators — risk clamped from 9 to 5
Domain age information unavailable

Details

Page Title

Outlook

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

technology software

(37%)

Domain Information

The domain name 'webmail.heplatform.nl' uses the Dutch country-code top-level domain (.nl) and includes subdomain 'webmail'. The second-level label 'heplatform' is 10 characters long holding 3 vowels versus seven consonants. Tokenizing the label suggests two words: he, platform. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmail.heplatform.nl

Page Load Overview

0.85s
Total Load Time
7
HTTP Requests
1
Domains
191 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:1,205 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7141.255.181.13Netherlands
AS31586Signet B.V.
71--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179439E3FA5562C332427607463DBB38A3B2A8417824EDD24397C1758EF81DB6417EBD9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:GyDwuJmtz7e05Nnfvi0aD2xDkzdKV7aQblNoJmgK4e2FuzzQpMhdalQclYtcY:UtzK05NpaD2xDEkF5F4nFumMz5cScY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59052:ZIggZGRZlgAdBKxRI6AcAoAuGLIBIBiiA5SkQIcpoTuDLlgUPiAECEJIEdgRZgJTE0gCAA4aAOgAQMDCsCQBvggYowbCIUQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f65f010989d9fc
Difference Hash:d0ccccccccd0d0d0
Wavelet Hash:3f273f373f130000
Color Hash:#75bf40

Scan History

Scan history not available

Unable to load historical scan data