Additionally, many companies use third party recruiters or an outsourced recruiting department, where the email domain may not match the company domain. And oft

Additionally, many companies use third party recruiters or an outsourced recruiting department, where the email domain may not match the company domain. And often refer you to a different third party for identity/credential verification. It's more like the industry has configured itself in such a way that it's indistinguishable from phishing. Like the insurance industry.