ScanMalware.com

Security Scan Report: m16.mailplus.nl

Submitted: May 13, 2026, 3:32:53 PMCompleted: May 13, 2026, 3:35:24 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is m16.mailplus.nl and was registered NaN years ago.

Submitted URL: https://m16.mailplus.nl

The Cisco Umbrella rank of the primary domain is #94,655 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 78%

4
Risk Score

The site is old and generally reputable, but a critical IDS alert suggests possible malware activity; proceed carefully.

Risk Factors
Critical IDS alert indicating possible command‑and‑control activity
Credential collection form on a domain not verified as official brand
Safety Factors
Domain age > 20 years and well‑established registration
Cisco Umbrella ranking within top 100 K
No Indicators of Compromise found in threat intel databases
No JavaScript malware YARA matches
Low JavaScript obfuscation score
Domain age information unavailable

Details

Page Title

Mailplus

Scan Type

public

Language

🇳🇱

Dutch

(53% confidence)

Category

unknown

(0%)

Domain Information

Within the Dutch country-code top-level domain (.nl), 'm16.mailplus.nl' is registered; it also runs on subdomain 'm16'. The registrable portion 'mailplus' spans 8 characters holding three vowels versus 5 consonants. Splitting it apart reveals 2 words: mail, plus. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://m16.mailplus.nl

Page Load Overview

0.92s
Total Load Time
32
HTTP Requests
2
Domains
25 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Language Code:nl
Detection Confidence:53%
Script Type:Latin
Text Length:120 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1646.31.50.40Netherlands
AS51514Spotler Nederland B.V.
1646.31.50.55Netherlands
AS51514Spotler Nederland B.V.
322--

Detected Technologies2

PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160F1CD90A28C694BC9098446FFA15890826FB8D753418ABEEF1B753FE49CC8479747BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:s+WcRc6cMcsc/cEcMcWc8cwcnc6cOc8cEcvc6cPcsclbrJcErcAc6cMc8c/c/:bWXRxUJRLBdcXDBJEXkxV4tXRBU/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7764:UBABAQ2FSAQIVgkghBOgCjBFTAIgDRWEYJKBRACmACAQCADxAKI4IAASAoKGBgBYycQyQLDIMihkJgIKCplIALwiQwMnABBh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3cfdfdfffffffff
Perceptual Hash:b131666666c6ce8e
Difference Hash:0e98903008000000
Wavelet Hash:030f0f1f0f0f0f0f
Color Hash:#862d7b

Other Hashes

Crop Resistant:0e98903008000000

Scan History

Scan history not available

Unable to load historical scan data