Likely scam — do not engage
Our AI analyst read the message body and judged it likely to be phishing.
MalwareTips analyst · message material
employment_scamThis unsolicited recruitment email for an adult-themed chat role exhibits characteristics common to employment scams.
- Uses a generic recruitment pitch for a high-commission, adult-themed remote role often associated with employment fraud.
- The sender domain shows a DNSBL hit, indicating a poor reputation for the infrastructure.
- The email lacks specific details about the recipient's previous application or CV submission, suggesting a mass-distributed solicitation.
- The sender's DMARC policy is set to 'none', providing no protection against domain spoofing.
Do not click the application link or provide any personal information. Mark the email as junk and delete it immediately.
Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.
Why this verdict
100 → 41The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 41.
- AI analyst flagged 85% phishing likelihood (employment_scam).ai_phishing_detected-43
- Listed on 1 DNSBL: URIBL.dnsbl_listed-15
- AI analyst flagged 40% spam likelihood.ai_spam_detected-6
- Domain publishes strong authentication policy: DMARC p=none · SPF soft-fail.auth_dns_published+5
Display name, domain reputation, and authentication checks for the From address.
Display-name impersonation
NO BRAND CLAIMThe display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.
Brand-lookalike radar
okNo typosquat or homoglyph match against the top 50 phished brands.
Domain age
errorRDAP check did not run.
MX records, deliverability probe, provider classification, and DNS blocklists.
Deliverability
ok- RFC 5322 syntax valid
- 5 MX records publishedaspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more
Provider classification
okNot on our disposable-provider list and not a recognised consumer freemail (Gmail / Outlook / Yahoo etc.) — likely a custom domain.
DNS blocklists
okListed by 1 of 3 blocklists:
Breach history for this address and the structural identity of the sending domain.
Breach exposure (HIBP)
okSkipped — the breach check was not available for this scan.