ScanMalware.com

Security Scan Report: m9.mailplus.nl

Submitted: Sep 26, 2026, 6:19:21 PMCompleted: Sep 26, 2026, 6:19:56 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7332fd82-6640-459c-8554-55ebafb9a364Domain and IP registration (RDAP)/api/v1/rdap/7332fd82-6640-459c-8554-55ebafb9a364Certificate Transparency/api/v1/ct/m9.mailplus.nlHow often this domain was scanned/api/v1/domain/stats/m9.mailplus.nlScan history for this domain/api/v1/domain/history/m9.mailplus.nl?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is m9.mailplus.nl and was registered 22 years ago.

Submitted URL: https://m9.mailplus.nl

The Cisco Umbrella rank of the primary domain is #94,655 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 85%

0
Risk Score

Official MailPlus extranet login on its own long-established domain (22 years, top-100K ranked). Same-origin form, no impersonation, no threat-intel or behavioral signals. Legitimate.

Safety Factors (4)
Established 22-year-old domain matching the brand it displays
Login form is same-origin and posts to the site's own backend endpoint
No cross-origin credential handling or JavaScript credential exfiltration
Clean threat-intel, YARA, IDS and behavioral analysis results
Domain age information unavailable

Details

Page Title

Mailplus

Scan Type

public

Domain Name Analysis

You're looking at domain 'm9.mailplus.nl' on the Dutch country-code top-level domain (.nl) with subdomain 'm9'. The core label 'mailplus' covers 8 characters with 3 vowels and 5 consonants. Breaking it apart gives 2 words: mail, plus. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://m9.mailplus.nl

Page Load Overview

0.36s
Total Load Time
24 KB
Total Size

Language Analysis

Primary Language

🇳🇱Dutch
Code: nl
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Text Length:120 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
446.31.50.7Netherlands
AS51514Spotler Nederland B.V.
246.31.50.67Netherlands
AS51514Spotler Nederland B.V.
246.31.50.41Netherlands
AS51514Spotler Nederland B.V.
246.31.50.66Netherlands
AS51514Spotler Nederland B.V.
104--

Detected Technologies2

PasswordField
100%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160F1CD90A28C694BC9098446FFA15890826FB8D753418ABEEF1B753FE49CC8479747BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:s+WcRc6cMcsc/cEcMcWc8cwcnc6cOc8cEcvc6cPcsclbrJcErcAc6cMc8c/c/:bWXRxUJRLBdcXDBJEXkxV4tXRBU/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7764:UBABAQ2FSAQIVgkghBOgCjBFTAIgDRWEYJKBRACmACAQCADxAKI4IAASAoKGBgBYycQyQLDIMihkJgIKCplIALwiQwMnABBh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3cfdfdfffffffff
Perceptual Hash:b131666666c6ce8e
Difference Hash:0e98903008000000
Wavelet Hash:c3cfcfdf00000000
Color Hash:#dce06c

Other Hashes

Crop Resistant:0e98903008000000

Scan History

Scan history not available

Unable to load historical scan data