Link: Google Cloud Storage with base64 go/sub-ID fragment

type.inbound
and any(body.links,
        .href_url.domain.domain == "storage.googleapis.com"
        // base64 tracking query hidden in the fragment (go=1 click, go=2 unsubscribe)
        and regex.imatch(strings.decode_base64(.href_url.fragment[1:],
                                               ignore_padding=true
                         ),
                         'go=[12]&s1=\d+&s2=\d+&s3=[a-z]+'
        )
)