AriaAICompany/phish-structural

1{
2  "model_name": "phish-structural",
3  "analysis_version": "phish-0.1.0",
4  "seed": 3,
5  "n_train": 160,
6  "features": [
7    "reply_to_mismatch",
8    "return_path_mismatch",
9    "from_display_addr_mismatch",
10    "auth_results_present",
11    "spf_header_present",
12    "dkim_header_present",
13    "received_hop_count",
14    "url_count",
15    "unique_domain_count",
16    "ip_url_count",
17    "punycode_url_count",
18    "userinfo_url_count",
19    "shortener_url_count",
20    "display_href_mismatch_count",
21    "lookalike_domain_count",
22    "brand_domain_mismatch",
23    "credential_lexicon",
24    "urgency_lexicon",
25    "money_lexicon",
26    "attachment_count",
27    "html_form_present",
28    "hidden_text_hint",
29    "subject_len",
30    "body_len",
31    "persian_char_ratio",
32    "mixed_script",
33    "has_html",
34    "missing_from",
35    "missing_message_id"
36  ],
37  "split": "campaign / sender / template",
38  "never_outputs": [
39    "safe",
40    "benign"
41  ]
42}