{"success":true,"data":{"id":"href-text-domain-mismatch","label":"Link text shows one domain but clicks through to a different one","description":"A link's visible text shows a trusted domain (e.g. `https://www.paypal.com/signin`) but the actual href points at a completely different domain. The user's eye reads the trusted brand; clicking goes to the attacker. Known email-marketing click trackers (MailChimp, SendGrid, HubSpot, Klaviyo, etc.) are allowlisted so legitimate tracked newsletters do not trip this signal.","tier":"danger","category":"other","isThin":false}}