Service abuse: Self-service platform redirecting to newly registered suspicious domain

type.inbound
and any(body.current_thread.links,
        .href_url.domain.root_domain in $self_service_creation_platform_domains
        and any(ml.link_analysis(.).final_dom.links,
                network.whois(.href_url.domain).days_old < 30
                and .href_url.domain.tld in $suspicious_tlds
        )
)