{"success":true,"data":{"id":"supplychain-port-disruption-phish","label":"Fake port disruption / cargo hold / customs clearance fee urgency lure targeting importers and freight forwarders — \"Your shipment is held at port — pay customs clearance / release fee immediately or cargo will be returned / auctioned.\" Real port / customs notifications come from CBP (cbp.gov), the freight forwarder, or the shipping line's official domain — never via cold inbound email demanding emergency payment to an unknown portal. Detection: port disruption/cargo hold/customs clearance + fee/payment urgency + urgency language + no In-Reply-To + no List-Unsubscribe. Source: GC1 R16; CBP phishing advisory 2025.","description":"Fake port disruption / cargo hold / customs clearance fee urgency lure targeting importers and freight forwarders. Real supply chain disruptions (Suez 2021, Baltimore 2024, Red Sea 2024-2025) make \"your shipment is held at port\" highly credible. Attackers demand a clearance / release / demurrage fee via an unknown portal or cargo will be returned / auctioned. Real customs/port notifications come from cbp.gov, the freight forwarder, or the shipping line's official domain. Signal fires when: (1) port disruption / cargo hold / customs clearance AND (2) fee / payment required AND (3) urgency (immediate / auctioned / returned) AND (4) no In-Reply-To AND (5) no List-Unsubscribe. Source: GC1 R16; CBP phishing advisory 2025.","tier":"danger","category":"phishing","isThin":false}}