{"success":true,"data":{"id":"linkedin-account-suspension-phish","label":"Fake LinkedIn account suspension/verification from non-linkedin.com domain — credential harvest targeting professionals; real LinkedIn security notices come exclusively from linkedin.com.","description":"Fake LinkedIn account suspension or identity verification notice from a non-linkedin.com domain — credential harvest targeting professionals with LinkedIn login credentials. Real LinkedIn security notices come exclusively from @linkedin.com authenticated email. Off-brand sender claiming account suspension, unusual activity, or identity verification + \"verify identity/confirm account\" CTA is a LinkedIn credential theft lure. Detection: LinkedIn account suspension/unusual activity vocabulary + verify identity/log in to LinkedIn/confirm account action + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R20; LinkedIn Trust & Safety advisory; APWG professional network credential phishing 2025.","tier":"danger","category":"phishing","isThin":false}}