Tier · dangerous
Verdict

Likely scam — do not engage

Screenshot Phishing Visual

stevenfryegjrt@outlook.com
At a glance
AI · 30% phishingDNSBL · 1 list
Risk score
62
/ 100
malicious
AI analyst

MalwareTips analyst · message material

generic_spam

This is obvious spam mimicking a flirty dating site message with explicit content to lure clicks.

Phishing likelihood30%
Spam likelihood95%
Red flags identified
  • Screenshot reveals explicit sexual content, fake profile message, and unsolicited spam button typical of adult spam or scams.
  • Purple clickbait theme combined with garbled text, ellipses, and typographical errors signals low-quality spam production.
  • Sender uses free Outlook.com provider with URIBL DNSBL hit indicating spam reputation.
  • Clickbait subject '❣️ I want to know your last name! 🔥' designed to provoke curiosity and engagement.
What to do

Do not click any buttons or links, as they likely lead to malware or scams. Mark the email as spam, delete it, and avoid replying.

Why this verdict

Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.

Why this verdict

10038

The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 38.

  • Screenshot OCR + visual pass flagged 100/100 phishing risk: This is obvious spam or a scam email mimicking a dating or adult site message to lure clicks. The explicit, poorly written content and lack of sender details are strong red flags for phishing or malware distribution.
    screenshot_phishing_visual
    -30
  • Listed on 1 DNSBL: URIBL.
    dnsbl_listed
    -15
  • AI analyst flagged 30% phishing likelihood (generic_spam).
    ai_phishing_detected
    -15
  • AI analyst flagged 95% spam likelihood.
    ai_spam_detected
    -14
  • Domain publishes strong authentication policy: DMARC p=none · SPF hard-fail.
    auth_dns_published
    +7
Sender identity

Display name, domain reputation, and authentication checks for the From address.

Display-name impersonation

NO BRAND CLAIM

The display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.

Brand-lookalike radar

ok

No typosquat or homoglyph match against the top 50 phished brands.

Domain age

ok

well-known free provider — age check skipped

Content evidence

Signals extracted from the message body, embedded URLs, and uploaded screenshot.

Screenshot vision analysis

VISUAL · 100/100

This is obvious spam or a scam email mimicking a dating or adult site message to lure clicks. The explicit, poorly written content and lack of sender details are strong red flags for phishing or malware distribution.

Visual red flags
  • Explicit sexual content
  • Garbled text with ellipses
  • Typographical errors
  • Purple clickbait theme
  • Fake profile message
  • Unsolicited spam button
Infrastructure

MX records, deliverability probe, provider classification, and DNS blocklists.

Deliverability

ok
  • RFC 5322 syntax valid
  • 1 MX record published
    outlook-com.olc.protection.outlook.com
  • SMTP probe · unknownSMTP probe disabled (set SMTP_PROBE_ENABLED=true to enable)

Provider classification

ok

Hosted on the consumer freemail provider outlook. Not a red flag in itself — billions of legitimate users — but do verify identity through other channels for anything sensitive.

DNS blocklists

ok

Listed by 1 of 3 blocklists:

URIBL
Reputation

Breach history for this address and the structural identity of the sending domain.

Breach exposure (HIBP)

ok

HIBP_API_KEY not configured

Sender infrastructure

Domain
outlook.com
Domain age
well-known free provider — age check skipped
Provider
outlook (free)
MX hosts
outlook-com.olc.protection.outlook.com
Scanned by
Boshman
MalwareTips never stores the raw address. Every input is SHA-256 hashed before persistence — the URL above IS that hash. We keep the local part, domain, and display name separately so the report can render them; the original raw input is dropped after the scan. If you received this email and are worried, do not click any links and do not reply — verify the sender through a known-good channel.