type.inbound
and 0 < length(body.links) < 10
and length(recipients.to) == 1
and recipients.to[0].email.domain.valid
and any(body.links,
// the url redirects to a blob url
ml.link_analysis(.).effective_url.scheme =~ 'blob'
)
Playground
Test against your own EMLs or sample data.