{"success":true,"data":{"id":"body-long-whitespace-padding","label":"Body has 10+ consecutive blank lines — pushing scam content below the preview fold","description":"The body has a run of 10 or more consecutive blank or whitespace-only lines. Spammers use this to push the real scam content below the email client's preview fold: the inbox preview snippet shows an innocuous-looking short message, and scrolling past the blank region reveals the actual scam payload. Used to evade keyword filters that only scan the first N visible characters of a message, and to foil security researchers manually auditing email previews. Legitimate email uses 1-3 blank lines for paragraph spacing; newsletters occasionally stack 5-6 between sections. 10+ consecutive blanks is well past the natural range and specifically captures deliberate padding. Detection runs on `bodyPlain` directly so the real newline structure is preserved — HTML-only emails are skipped because tag-stripping collapses multi-line structure. Weight: +3, moderate. The padding alone doesn't prove phishing, so the signal combines with other evidence rather than solo-triggering.","tier":"warning","category":"body","isThin":false}}