{"success":true,"data":{"id":"display-name-mixed-script","label":"From display name mixes Latin with Cyrillic/Greek (homograph)","description":"The From display name contains BOTH an ASCII Latin letter AND a Cyrillic or Greek letter — e.g. `\"Pаypal Support\"` where the `а` is Cyrillic U+0430. The user reads \"Paypal Support\" in the inbox From column and trusts it, but the brand-keyword check (`display-name-spoof:paypal`) doesn't fire because its substring match looks for literal ASCII \"paypal\". Same confusable-letter vector as attachment-filename and subject-word homographs, but specifically for the display name — the most visible element in the inbox list. A pure-Cyrillic display name from a Russian sender does NOT fire because it has no ASCII letters mixed in. Weighted at +5 — high-confidence deception with zero legitimate-use (no person or business chooses a display name that mixes scripts).","tier":"danger","category":"sender","isThin":false}}