Google Message Security for Google Apps Administration Guide - Manual (Page 395)

Customizing Notifications 395
where the URL is the location of the Widget for your organization.)
New Spam Notification
Your users receive the New Spam notification when suspicious messages are
held in their Message Center quarantine, pending review. The time period
between notifications is determined through the “Notification Interval” setting.
The “Date:”, “From:”, “To:” & “Subject:” lines must be at the top of a custom
notification, since they are used as the actual message headers for the message
when sent out. If they are not included, then the custom notification messages will
bounce.
The tokens available for the New Spam notification:
<-date->
The timestamp indicating the date and time the notification was sent.
<-from->
The return address, referenced as your organization's Support Contact in the
“Support Address” field (see organization record).
<-address->
The specific user's email address.
<-notice_address->
Used as the location to send notifications as found on each user's user
record.Note: By inserting this address as the “To” recipient, the notification is
sent to a recipient which may not necessarily be the owner of the Message
Center account. In most cases, you should use the Notice Address for the
“To” line-if no “Notice Address” address exists for a user record, this field
defaults to inserting the normal user “Address” (above). The Notice Address is
especially important if another administrator might manage a user's Message
Centers on behalf of the user-for example, in a corporate environment to
enforce user-level settings while also denying account access.
<-isp->
The <-isp-> token is replaced by the value in the “Customer Name” field of the
organization.
<-inactive1->
Inserts a stock warning if a user has never visited the Message Center. This
appears as:
********************************************************************
** Please Note! You have not yet checked your Message Center. **