type.inbound
and subject.base == ""
and (
body.plain.raw is null
or body.plain.raw == ""
or regex.imatch(body.plain.raw, '^\s*$')
)
and (
body.html.raw is null
or body.html.raw == ""
or regex.imatch(body.html.raw, '^\s*$')
)
and length(attachments) == 0
and profile.by_sender().prevalence != "common"
Playground
Test against your own EMLs or sample data.