{"success":true,"data":{"id":"header-date-future-skew","label":"Date header skewed ≥12h from delivery time (spam staging)","description":"The `Date:` header timestamp is more than 12 hours away from the Gmail API's authoritative delivery timestamp (`msg.date`). Spam staging tools manipulate the Date header in two ways: (1) far-future dates — pushing the message to the top of inbox sort-by-date views, increasing open rates before the user realises it was manufactured; (2) far-past dates — making the email appear old so time-based filter rules that only watch recent mail skip over it. Every legitimate MTA (Postfix, Exim, Gmail, Microsoft SMTP, the major ESPs) stamps Date: within seconds of actual submission — network latency and clock drift never account for a 12-hour gap. The guard compares raw `headers['date']` against `msg.date` using `Math.abs(parsedDateHeader - parsedMsgDate) > 12 * 60 * 60 * 1000`. Does not fire for strict_invoice / strict_work / strict_shopping sender types. Weighted at +2 — not solo-decisive but pairs well with other structural spam signals.","tier":"danger","category":"other","isThin":false}}