MalwareTips
Tier · dangerous
Verdict

Likely scam — do not engage

Our AI analyst read the message body and judged it likely to be phishing.

Talent Acquisition Team·noreply@hiring.talentsjobs.in
At a glance
AI · 85% phishingDNSBL · 1 list
Risk score
67
/ 100
malicious
AI analyst

MalwareTips analyst · message material

employment_scam

This unsolicited internship offer uses a generic domain and high-pressure tactics to solicit applications.

Phishing likelihood85%
Spam likelihood90%
Red flags identified
  • Uses a suspicious domain (hiring.talentsjobs.in) that does not belong to the TATA group.
  • Employs high-pressure language like 'LIMITED VACANCIES' and 'Early applications are highly encouraged' to induce urgency.
  • The sender domain lacks proper authentication (SPF soft-fail, DMARC policy none) and appears on DNSBL blacklists.
  • The email promises high stipends and full-time roles to a broad, non-specific audience, a common trait of employment scams.
What to do

Do not click any links or provide personal information. Delete the email immediately as it is likely a fraudulent attempt to collect candidate data.

Why this verdict

Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.

Why this verdict

100 → 33

The scorer starts every address at 100 trust and applies each signal below in turn. Negative deltas are penalties (red), positive deltas are bonuses (emerald). Final clamped trust: 33.

  • AI analyst flagged 85% phishing likelihood (employment_scam).
    ai_phishing_detected
    -43
  • Listed on 1 DNSBL: URIBL.
    dnsbl_listed
    -15
  • AI analyst flagged 90% spam likelihood.
    ai_spam_detected
    -14
  • Domain publishes strong authentication policy: DMARC p=none · SPF soft-fail.
    auth_dns_published
    +5
Sender identity

Display name, domain reputation, and authentication checks for the From address.

Display-name impersonation

NO BRAND CLAIM

The display name doesn't resemble any of the top phished brands we track — this isn't a brand-impersonation attempt.

Brand-lookalike radar

ok

No typosquat or homoglyph match against the top 50 phished brands.

Domain age

error

RDAP check did not run.

Infrastructure

MX records, deliverability probe, provider classification, and DNS blocklists.

Deliverability

ok
  • RFC 5322 syntax valid
  • 1 MX record published
    mx.mlrcld.com
  • SMTP probe · unknown — SMTP probe disabled (set SMTP_PROBE_ENABLED=true to enable)

Provider classification

ok

Not on our disposable-provider list and not a recognised consumer freemail (Gmail / Outlook / Yahoo etc.) — likely a custom domain.

DNS blocklists

ok

Listed by 1 of 3 blocklists:

URIBL
Reputation

Breach history for this address and the structural identity of the sending domain.

Breach exposure (HIBP)

ok

HIBP_API_KEY not configured

Sender infrastructure

Domain
hiring.talentsjobs.in
Domain age
Unknown
Provider
custom domain
MX hosts
mx.mlrcld.com
Scan another
Check a different email address
URL instead?
Check if a link is safe
This report URL contains a SHA-256 hash, while the cached report retains normalized sender components, display name when available, and derived evidence. Raw .eml and screenshot bytes are discarded after extraction. The page is noindex, but anyone with the link may be able to view it; do not submit secrets or confidential messages. If you received this email and are worried, do not click any links and do not reply — verify the sender through a known-good channel.