{"success":true,"data":{"id":"multipart-content-divergence","label":"Plain text and HTML body content differ significantly (evasion)","description":"The plain-text and HTML parts of this multipart email share less than 25% vocabulary overlap. Spammers send innocent text in the plain-text part (which some filters analyze) and malicious content in the HTML part (which users see). This is a documented evasion technique in SpamCop forums and academic literature. Only fires when both parts contain 8+ substantive words each.","tier":"danger","category":"other","isThin":false}}