MalwareTips
Tier · dangerous
Verdict

Confirmed scam — delete it

The provided content is a screenshot of a social media profile rather than a malicious email.

Subject·not provided
Body-only scan — sender identity and infrastructure checks are unavailable.Re-scan with sender
At a glance
Generic Spam3 red flags
Risk score
100
/ 100
malicious
AI analyst

MalwareTips analyst · message material

generic_spam

The provided content is a screenshot of a social media profile rather than a malicious email.

Phishing likelihood5%
Spam likelihood10%
Red flags identified
  • Content consists of a social media interface screenshot instead of standard email communication
  • Lack of typical phishing indicators such as malicious links or fraudulent requests
  • Unsolicited profile content suggests this is a misidentified social media notification
What to do

This appears to be a social media notification or screenshot. Delete the message as it does not pose a security threat.

Why this verdict

Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.

Why this verdict

100 → 0

The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 0.

  • The pasted address doesn't parse as a valid RFC-[number] email address.
    syntax_invalid
    -100
Screenshot analysis

Screenshot vision analysis

VISUAL · 10/100

The image is a screenshot of a TikTok-style social media interface rather than an email. It displays a user profile and video content, which does not contain typical phishing indicators like malicious links or fraudulent requests.

Visual red flags
  • social media interface screenshot
  • unsolicited profile content
Unlock more checks

Paste the sender to unlock identity + infrastructure analysis

This scan analysed the message body only. Adding the sender address, a Gmail Name <a@b.com> line, or full headers unlocks:

  • Display-name impersonation
    Spot mismatched names like "PayPal Support" on a random Gmail.
  • SPF · DKIM · DMARC
    See whether the sending server is authorised to use that domain.
  • Domain age + registrar
    Brand-new domains are one of the strongest phish signals.
  • Breach exposure
    How many known data breaches this specific address appears in.
  • MX + DNSBL reputation
    Whether the domain can even receive mail and if it's on any blocklists.
Add sender and re-scan

Your previous paste won't be sent — you'll start a fresh scan with both fields.

Scan another
Check a different email address
URL instead?
Check if a link is safe
This report URL contains a SHA-256 hash, while the cached report retains normalized sender components, display name when available, and derived evidence. Raw .eml and screenshot bytes are discarded after extraction. The page is noindex, but anyone with the link may be able to view it; do not submit secrets or confidential messages. If you received this email and are worried, do not click any links and do not reply — verify the sender through a known-good channel.