This rule detects a specific spam pattern referred to as a VertiStream warm-up excerpt. It analyzes inbound messages to identify a single, unpunctuated line extracted from a scraped article, truncated with an ellipsis (either three periods or a Unicode ellipsis). The detection requires: no links beyond mailto, no attachments, and the message must not be a reply or forward. The body must consist of one line with no newline characters, ASCII content aside from the ellipsis, and be between 140 and 210 characters in length. A regex check ensures a near-letter-dense line ending with an ellipsis. The subject (subject.base) must be a multi-word title with no punctuation, with up to three leading gateway separator characters and a minimum length, and must contain at least two words separated by spaces. This combination aims to flag spam that uses a plausible article excerpt to seed social engineering attacks, while reducing false positives by enforcing content and formatting constraints on both body and subject. The rule relies on content analysis of the email thread to identify the characteristic excerpt pattern rather than relying on metadata alone, and it excludes non-ASCII characters to maintain consistency in detection.