Under each message in your dashboard you'll see short tags. They say what Pengon noticed about it, and a message can have several.
The AI's verdict
ai:legitThe AI read it as a genuine enquiry.ai:unsureThe AI couldn't tell, so the other checks decided.ai:cold_outreach, ai:service_pitch, ai:lead_brokerSales pitches and outreach with no real connection to your business.ai:warm_lead_spam, ai:fake_specificityPitches dressed up as real enquiries, often with made-up details.ai:crypto_scamScams.ai:spamSpam that doesn't fit one of the types above.
Signs of a bot
honeypot_filledA hidden field that only bots fill in was filled in.disposable_emailA throwaway email address.email_pattern_bot, email_pattern_random, email_pattern_promotionalAn address that looks machine-made or promotional.invalid_emailNot a working email address.url_in_nameA link in the name field.
The message itself
keywords:…Words that are common in spam, listed after the colon.excessive_capsMostly capital letters.high_non_latin_ratioMostly non-Latin letters. Real messages in other languages can get this too, so check those.too_short, no_content, garbage_messageEmpty, very short or unreadable.
Other tags
owner_testA short test from your own account email. Pengon lets it through so you can test your form.copy sentThe visitor was emailed a copy of their message.ai:quota_exhaustedYour site used up its daily AI checks, so this message got the other checks only.ai_timeout, ai_errorThe AI didn't answer in time, so this message got the other checks only.ai:skipped_cheap_onlyThe AI is paused for your site after unusual traffic. The other checks still run.
If Pengon got one wrong, open the message and click Recover (not spam) or Report spam. See What happens when Pengon blocks a message.