Treat with caution
Screenshot Phishing Visual
MalwareTips analyst · message material
generic_spamThis is an unsolicited commercial solicitation from an unverified sender regarding electronic component supply.
- The sender address domain does not match the claimed company name.
- The email is an unsolicited commercial outreach typical of bulk spam.
- The sender domain has a hard-fail SPF record, indicating poor email authentication practices.
Do not reply to this email or provide any business information. Mark it as spam and delete it.
Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.
Why this verdict
100 → 58The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 58.
- Screenshot OCR + visual pass flagged 75/100 phishing risk: The email is an unsolicited commercial solicitation sent from a suspicious domain that does not match the claimed company name. It has been automatically flagged as spam by the email provider.screenshot_phishing_visual-23
- AI analyst flagged 30% phishing likelihood (generic_spam).ai_phishing_detected-15
- AI analyst flagged 90% spam likelihood.ai_spam_detected-14
- Domain publishes strong authentication policy: DMARC p=none · SPF hard-fail.auth_dns_published+7
- Clean across 3 DNSBLs checked.dnsbl_clean+3
Display name, domain reputation, and authentication checks for the From address.
Display-name impersonation
NO BRAND CLAIMThe display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.
Brand-lookalike radar
okNo typosquat or homoglyph match against the top 50 phished brands.
Domain age
errorRDAP check did not run.
Signals extracted from the message body, embedded URLs, and uploaded screenshot.
Screenshot vision analysis
VISUAL · 75/100The email is an unsolicited commercial solicitation sent from a suspicious domain that does not match the claimed company name. It has been automatically flagged as spam by the email provider.
- sender address domain mismatch
- unsolicited commercial outreach
- generic business inquiry
- flagged as spam by email provider
MX records, deliverability probe, provider classification, and DNS blocklists.
Deliverability
ok- RFC 5322 syntax valid
- 2 MX records publishedmx-001.cy-email.commx01.dm.aliyun.com
- SMTP probe · unknown — SMTP probe disabled (set SMTP_PROBE_ENABLED=true to enable)
Provider classification
okNot on our disposable-provider list and not a recognised consumer freemail (Gmail / Outlook / Yahoo etc.) — likely a custom domain.
DNS blocklists
okClean across all 3 blocklists checked (SURBL, Spamhaus DBL, URIBL).
Breach history for this address and the structural identity of the sending domain.
Breach exposure (HIBP)
okHIBP_API_KEY not configured