Link: Google Cloud Storage with prefixed base64 dash-record fragment

type.inbound
and any(body.links,
        .href_url.domain.domain == "storage.googleapis.com"
        and regex.match(.href_url.fragment[:31], '[A-Z0-9]{30}[ru]')
        and regex.imatch(strings.decode_base64(.href_url.fragment[31:],
                                               ignore_padding=true
                         ),
                         '\d+-\d+-\d+-[a-z]-\d+-\d+-\d+-\d+-\d+-\d+-\d+-\d+-[a-z0-9]{9}-[0-9a-f]{8}'
        )
)