Attachment with free subdomain host URL (unsolicited)

type.inbound
and any(attachments,
        .file_extension in~ ("pdf")
        and any(file.explode(.),
                any(.scan.url.urls,
                    .domain.root_domain in $free_subdomain_hosts
                    and .domain.subdomain is not null
                    and .domain.subdomain != "www"
                    and .domain.domain != "sts.amazonaws.com"
                    and .domain.root_domain != "zendesk.com"
                )
        )
)
and (
  (
    sender.email.domain.root_domain in $free_email_providers
    and sender.email.email not in $recipient_emails
  )
  or (
    sender.email.domain.root_domain not in $free_email_providers
    and sender.email.domain.domain not in $recipient_domains
  )
)