Tier · dangerous
Verdict

Likely scam — do not engage

Our AI analyst read the message body and judged it likely to be phishing.

recruitment@onlyupagency.net
At a glance
AI · 85% phishingDNSBL · 1 list
Risk score
59
/ 100
malicious
AI analyst

MalwareTips analyst · message material

employment_scam

This unsolicited recruitment email for an adult-themed chat role exhibits characteristics common to employment scams.

Phishing likelihood85%
Spam likelihood40%
Red flags identified
  • Uses a generic recruitment pitch for a high-commission, adult-themed remote role often associated with employment fraud.
  • The sender domain shows a DNSBL hit, indicating a poor reputation for the infrastructure.
  • The email lacks specific details about the recipient's previous application or CV submission, suggesting a mass-distributed solicitation.
  • The sender's DMARC policy is set to 'none', providing no protection against domain spoofing.
What to do

Do not click the application link or provide any personal information. Mark the email as junk and delete it immediately.

Why this verdict

Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.

Why this verdict

100 → 41

The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 41.

  • AI analyst flagged 85% phishing likelihood (employment_scam).
    ai_phishing_detected
    -43
  • Listed on 1 DNSBL: URIBL.
    dnsbl_listed
    -15
  • AI analyst flagged 40% spam likelihood.
    ai_spam_detected
    -6
  • Domain publishes strong authentication policy: DMARC p=none · SPF soft-fail.
    auth_dns_published
    +5
Sender identity

Display name, domain reputation, and authentication checks for the From address.

Display-name impersonation

NO BRAND CLAIM

The display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.

Brand-lookalike radar

ok

No typosquat or homoglyph match against the top 50 phished brands.

Domain age

error

RDAP check did not run.

Infrastructure

MX records, deliverability probe, provider classification, and DNS blocklists.

Deliverability

ok
  • RFC 5322 syntax valid
  • 5 MX records published
    aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more

Provider classification

ok

Not on our disposable-provider list and not a recognised consumer freemail (Gmail / Outlook / Yahoo etc.) — likely a custom domain.

DNS blocklists

ok

Listed by 1 of 3 blocklists:

URIBL
Reputation

Breach history for this address and the structural identity of the sending domain.

Breach exposure (HIBP)

ok

Skipped — the breach check was not available for this scan.

Sender infrastructure

Domain
onlyupagency.net
Domain age
Unknown
Provider
custom domain
MX hosts
aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
This report URL contains a SHA-256 hash, while the cached report retains normalized sender components, display name when available, and derived evidence. Raw .eml and screenshot bytes are discarded after extraction. The page is noindex, but anyone with the link may be able to view it; do not submit secrets or confidential messages. If you received this email and are worried, do not click any links and do not reply — verify the sender through a known-good channel.