type.inbound
and any(body.links,
.href_url.domain.domain == "justpaste.it"
and strings.istarts_with(.href_url.path, '/redirect/')
// wrapped destination is not back to justpaste.it
and not strings.icontains(.href_url.path, 'justpaste.it')
)
and not sender.email.domain.root_domain == "justpaste.it"
Playground
Test against your own EMLs or sample data.