type.inbound
// freemailer
and sender.email.domain.root_domain in $free_email_providers
// goodreads mention
and strings.icontains(body.current_thread.text, "goodreads")
// addresses the recipient as the author of their own work
and regex.icontains(body.current_thread.text,
'\byour (?:books?|work|text|title|novel|manuscript|writing|scholarship|research|reporting|story)\b'
)
//
and regex.icontains(body.current_thread.text,
'\b(?:featur|spotlight|showcase|introduce your|invite you|selected your|reading (?:cycle|circle|challenge|community|discussion))'
)
// negate highly trusted sender domains unless they fail DMARC authentication
and not (
sender.email.domain.root_domain in $high_trust_sender_root_domains
and coalesce(headers.auth_summary.dmarc.pass, false)
)
Playground
Test against your own EMLs or sample data.