[Test Rules] [PR #4642] modified rule: Evasion: Hidden content divs from Gmail sender

Author: github-actions[bot]

detection-rules/4642_evasion_hidden_content_gmail.yml

@@ -4,7 +4,7 @@ type: "rule"
 severity: "medium"
 source: |
   type.inbound
-  and sender.email.domain.domain == 'gmail.com'
+  and sender.email.domain.root_domain in $free_email_providers
   and strings.count(body.html.raw,
                     '<div style="display:none;opacity:0;width:0;height:0;overflow:hidden" aria-hidden="true">'
   ) >= 3
@@ -20,4 +20,4 @@ detection_methods:
 id: "f582e47b-39eb-54d7-aade-44427717376b"
 og_id: "15548316-19ca-5f81-91d4-98a877bae765"
 testing_pr: 4642
-testing_sha: 49914052939580d125e777347597a3530261c826
+testing_sha: 54f5b322212d2a425b36234925bfd3cb219799d4