Try this regex instead:/^http:\/\/geocities\.yahoo\.com\.br\b/i
hahaha, this worked - and it tagged that broken autoresponder we've been seeing.
boundary="--=ce94da72-0632-49d0-99bb-3f8c8149300b"
X-Virus-Scanned: by amavisd-new at mailgate.pbp.net
X-Spam-Status: Yes, score=9.704 tagged_above=-999 required=6
tests=[GEOCITIES_YAHOO=6.01, NO_REAL_NAME=0.55, SARE_SUB_BULK_EMAIL=0.144,
VIRUS_WARNING395=3]
X-Spam-Score: 9.704
X-Spam-Level: *********
X-Spam-Flag: YES
:-D
