{"success":true,"data":{"id":"fake-high-priority-from-freemail","label":"High-priority flag set from a free webmail account — no legit business mails from gmail.com with X-Priority: 1","description":"The email has `X-Priority: 1` or `Importance: high` set in the headers AND the From address is on a free webmail domain (gmail.com, yahoo.com, outlook.com, hotmail.com, protonmail.com, etc.). Neither condition is problematic on its own — some legitimate users mark urgent personal emails as high priority, and everyone has a gmail address. But the combination is attack-shaped: no legitimate transactional or marketing system operates from a free webmail account AND sets the \"High\" priority flag. Real businesses use dedicated mailer infrastructure on their own domain; real individuals sending urgent personal mail rarely bother with the X-Priority header at all (Outlook / Thunderbird expose it but Gmail doesn't, so most modern senders never touch it). A free-webmail sender deliberately setting high priority is trying to manipulate the recipient's attention via an emotional \"this looks important\" shortcut. Weight: +3 (compound with the +1 base `fake-high-priority` signal for a total of +4 on this shape).","tier":"danger","category":"scam","isThin":false}}