Confirmed scam — delete it
The domain appears on one or more DNS blocklists used for spam filtering.
MalwareTips analyst · message material
generic_spamUnsolicited business loan promotion from a blacklisted domain with mismatched branding and urgency tactics.
- From domain mp.nl.yourfull.com has DNSBL hits on Spamhaus DBL and URIBL indicating spam reputation.
- Display name Swishfund mismatches the suspicious from domain mp.nl.yourfull.com with no RDAP record.
- Uses generic greeting Beste ondernemer and urgency claim of funds within 24 hours.
- Promotes loans from €5.000 to €500.000 with a prominent CTA button in a format typical of spam.
- Screenshot shows no sender details or visible links, heightening suspicion.
Do not engage with the loan offer or click any buttons. Mark as spam, delete the email, and consider reporting to your email provider.
Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.
Why this verdict
skippedThis report was generated before the per-signal breakdown was available. Rescan this address to see the full score log.
Display name, domain reputation, and authentication checks for the From address.
Display-name impersonation
NO BRAND CLAIMThe display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.
Brand-lookalike radar
okNo typosquat or homoglyph match against the top 50 phished brands.
Domain age
okno RDAP record found
Signals extracted from the message body, embedded URLs, and uploaded screenshot.
Screenshot vision analysis
VISUAL · 70/100This is a promotional email for business loans from Swishfund using urgency and generic addressing, typical of spam; lacks visible from address or links, raising suspicion of phishing despite possible legitimacy.
- No sender details visible
- Generic greeting 'Beste ondernemer'
- Urgency claim 'within 24 hours'
- Prominent purple CTA button
- Unsolicited loan promotion
MX records, deliverability probe, provider classification, and DNS blocklists.
Deliverability
ok- RFC 5322 syntax valid
- 1 MX record publishedvirtualmail.webpower.eu
- SMTP probe · unknown — SMTP probe disabled (set SMTP_PROBE_ENABLED=true to enable)
Provider classification
okNot on our disposable-provider list and not a recognised consumer freemail (Gmail / Outlook / Yahoo etc.) — likely a custom domain.
DNS blocklists
okListed by 2 of 3 blocklists:
Breach history for this address and the structural identity of the sending domain.
Breach exposure (HIBP)
okHIBP_API_KEY not configured
Sender infrastructure
