type.inbound
and length(subject.base) <= 15
// detect email addresses in body text
and (
regex.imatch(body.current_thread.text,
'[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}'
)
)
// external freemail sender
and sender.email.domain.root_domain in $free_email_providers
// no attachments but allow one link
and length(attachments) == 0
and length(body.current_thread.links) == 1
Playground
Test against your own EMLs or sample data.