| [ | |
| "reply_to_mismatch", | |
| "return_path_mismatch", | |
| "from_display_addr_mismatch", | |
| "auth_results_present", | |
| "spf_header_present", | |
| "dkim_header_present", | |
| "received_hop_count", | |
| "url_count", | |
| "unique_domain_count", | |
| "ip_url_count", | |
| "punycode_url_count", | |
| "userinfo_url_count", | |
| "shortener_url_count", | |
| "display_href_mismatch_count", | |
| "lookalike_domain_count", | |
| "brand_domain_mismatch", | |
| "credential_lexicon", | |
| "urgency_lexicon", | |
| "money_lexicon", | |
| "attachment_count", | |
| "html_form_present", | |
| "hidden_text_hint", | |
| "subject_len", | |
| "body_len", | |
| "persian_char_ratio", | |
| "mixed_script", | |
| "has_html", | |
| "missing_from", | |
| "missing_message_id" | |
| ] |