Phishing script

gistfile1.txt

function processInbox()
{
  var recipient = 'information.security@iress.com';
  var label = GmailApp.getUserLabelByName("Phishing");    
  var threads = GmailApp.search("newer_than:24h");
  for each (thread in threads)
  {    
    for each (message in thread.getMessages())
    {
      if (isTargetMessage(message))
      {
        label.addToThread(thread);
        message.forward(recipient);
        break;
      }
    }
  }
}
function isTargetMessage(message)
{
  var body = message.getRawContent();
  return body.indexOf("X-Lucy-VictimUrl:") > -1;
}