type.inbound
and (
any(body.links,
.href_url.domain.punycode is not null and .href_url.domain.valid == true
)
or any(body.links, strings.starts_with(.href_url.domain.domain, "xn--"))
)
Playground
Test against your own EMLs or sample data.