Update recipient_address_in_link.yml (#1061)

Co-authored-by: Sam Scholten <[email protected]>

insights/links/recipient_address_in_link.yml

@@ -1,7 +1,7 @@
 name: "Recipient email in link"
 type: "query"
 source: |
-  distinct(map(filter(body.links, any(recipients.to, strings.icontains(..href_url.url, .email.email))), .href_url.url), .)
+  distinct(map(filter(body.links, any(recipients.to, strings.icontains(..href_url.url, .email.email) and any(recipients.to, .email.domain.valid))), .href_url.url), .)
 severity: "low"
 tags:
   - "Suspicious links"