{"success":true,"data":{"id":"thread-hijacking","label":"Fake Re:/Fwd: subject with no In-Reply-To header (thread hijack)","description":"Subject line has a \"Re:\", \"Fwd:\", or multilingual equivalent (SV:, AW:, TR:, VS:) suggesting the email is a reply or forward, but the email has NO In-Reply-To or References header. Every legitimate email client automatically adds In-Reply-To when composing a reply — its absence is a strong indicator that the sender manually inserted the reply prefix to make their email appear to be part of a trusted conversation thread. This is a classic social engineering trick used in phishing, BEC fraud, and malware delivery campaigns. Score: +3 trash.","tier":"danger","category":"other","isThin":false}}