Likely scam — do not engage
Our AI analyst read the message body and judged it likely to be phishing.
MalwareTips analyst · message material
generic_spamThis is an unsolicited text message from an unknown sender that triggered a platform-level spam warning.
- The message originates from an unknown, unverified phone number.
- The platform's built-in spam detection system flagged the communication as potentially malicious.
- The content follows a common social engineering pattern used to initiate unsolicited contact for scams.
Do not reply to the message or engage with the sender. Use the platform's built-in report feature to block the number and delete the conversation.
Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.
Why this verdict
100 → 26The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 26.
- AI analyst flagged 75% phishing likelihood (generic_spam).ai_phishing_detected-38
- Screenshot OCR + visual pass flagged 75/100 phishing risk: The screenshot shows an iMessage conversation with an unknown sender, triggering the platform's built-in spam warning. The interaction is characteristic of unsolicited SMS-based phishing or scam attempts.screenshot_phishing_visual-23
- Listed on 1 DNSBL: URIBL.dnsbl_listed-15
- AI analyst flagged 90% spam likelihood.ai_spam_detected-14
- Domain publishes strong authentication policy: DMARC p=reject · SPF none.dmarc_reject_enforced+11
Display name, domain reputation, and authentication checks for the From address.
Display-name impersonation
NO BRAND CLAIMThe display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.
Brand-lookalike radar
okNo typosquat or homoglyph match against the top 50 phished brands.
Domain age
okwell-known free provider — age check skipped
Signals extracted from the message body, embedded URLs, and uploaded screenshot.
Screenshot vision analysis
VISUAL · 75/100The screenshot shows an iMessage conversation with an unknown sender, triggering the platform's built-in spam warning. The interaction is characteristic of unsolicited SMS-based phishing or scam attempts.
- unsolicited text message from unknown number
- system-generated spam warning
MX records, deliverability probe, provider classification, and DNS blocklists.
Deliverability
ok- RFC 5322 syntax valid
- 1 MX record publishedmx-aol.mail.gm0.yahoodns.net
- SMTP probe · unknown — SMTP probe disabled (set SMTP_PROBE_ENABLED=true to enable)
Provider classification
okHosted on the consumer freemail provider aol. Not a red flag in itself — billions of legitimate users — but do verify identity through other channels for anything sensitive.
DNS blocklists
okListed by 1 of 3 blocklists:
Breach history for this address and the structural identity of the sending domain.
Breach exposure (HIBP)
okHIBP_API_KEY not configured