index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "runn1rnl8xzmqeh0kvov.web.app")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://adobe-cloud.secured-document.workers.dev/","https://adobe-owas-forest-40ff.sofsusjolmngung.workers.dev/","https://auth10-services-adobe-creativecloud.authcloud.workers.dev/","https://autumn-waterfall-48b2.purchase-doc-blliblju.workers.dev/","https://bitter-rice-cd6b.document-write-inv.workers.dev/","https://bitter-shadow-cf82.document-protections.workers.dev/","https://cloud.asset-documeeent.workers.dev/","https://docs-dew-6406.retupamyte.workers.dev/","https://docs-onlinsecurity-sun-6ac8.docsnetaseltic.workers.dev/","https://docs-verify-c671.thajetiase.workers.dev/","https://document.in-ouathh.workers.dev/","https://document.validation-ogg.workers.dev/","https://file.sheet-plugin.workers.dev/","https://floral-smoke-53e7.document-sharedds.workers.dev/","https://fragrant-rice-3226.document-shareds.workers.dev/","https://late-heart-722a.docs-coanyouamp.workers.dev","https://lively-star-1117.document-signoauth.workers.dev/","https://lucky-fog-25e7.storage-document-inc.workers.dev/","https://mdqw.qttzjapy2802.workers.dev/usr.html","https://odd-field-9e1d.microsft-docs-foecisayant.workers.dev/","https://proud-sun-4c38.document-protections.workers.dev/","https://red-firefly-5986.document-beoent.workers.dev/","https://secure-document-2b67.adobedocument.workers.dev/","https://soft-morning-9a22.document-write-inv.workers.dev/","https://soft-resonance-15e1.document-inv3289.workers.dev/","https://still-adobe-sign-ce12.utkerdihed.workers.dev/","https://sweet-tooth-e24f.files-document-coeed.workers.dev/","https://wandering-butterfly-2d13.document-remit.workers.dev/","https://yuihkjnm.ck9xds6orx4552.workers.dev/","Erpnextphishinglinks","http://hayburysearch.erpnext.com/haybury","https://3dlacrosse.erpnext.com/3d-lacrosse","https://aainsla.erpnext.com/american-access-casualty-company","https://advivo.erpnext.com/advivo","https://afm-org.erpnext.com/the-american-federation-of-musicians","https://air-equipments.erpnext.com/air-equipment","https://amcham.erpnext.com/american-chamber","https://amsysnl.erpnext.com/amsys","https://apollotheater.erpnext.com/apollo-theater","https://avesqos.erpnext.com/avesqo","https://aviapartners.erpnext.com/aviapartner","https://balguard.erpnext.com/balguard-engineering-ltd","https://barcoenergy.erpnext.com/barco-energy","https://bebat-be.erpnext.com/bebat","https://beyondkey.erpnext.com/beyondkey-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25&","https://bishopcleancare.erpnext.com/bishop-clean-care","https://bmspc.erpnext.com/bristol-metal-spraying-and-protective-coatings-ltd","https://brockskes-nl.erpnext.com/brockskes","https://brownsterlings.erpnext.com/brown-&-sterling","https://cfao-fr.erpnext.com/the-cfao-group","https://cmgt-org.erpnext.com/community-management","https://crd-rr.erpnext.com/crd-rr-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://crsteel.erpnext.com/capital-reinforcing","https://ctl-inc.erpnext.com/cory-tucker-&-larrowe","https://divalco.erpnext.com/divalco","https://etcppt.erpnext.com/etcp","https://eutect-de.erpnext.com/eutect-gmbh","https://fabricationsolutions.erpnext.com/fabrication-solutions-inc","https://famsbrands.erpnext.com/fam-brands","https://fancypakbrand.erpnext.com/fancy-pak-brand-inc","https://fpeseals.erpnext.com/fpe-seals","https://ghchospice.erpnext.com/ghc-hospice","https://heclanl.erpnext.com/hecl","https://hplegal.erpnext.com/hammond-partnership","https://ies-uk.erpnext.com/ies","https://intermat.erpnext.com/intermat","https://invertedmusic.erpnext.com/","https://invertedmusic.erpnext.com/inverted-music","https://iskramehanizmi-si.erpnext.com/iskra-mehanizmi","https://jacot-nl.erpnext.com/jacot-audiovisueel","https://jobasi-sa.erpnext.com/jobasi","https://jsmltd-jp.erpnext.com/jsm-ltd?mc_phishing_protection_id=28048-c6nembf0s0v96ql4hen0","https://jtdinc.erpnext.com/tisdel-distributing","https://kis-no.erpnext.com/kis","https://laborlawdenver.erpnext.com/labor-law-denver","https://leva-eu.erpnext.com/leva-eu","https://linacservices.erpnext.com/linac-services-limited","https://local802afm.erpnext.com/local-802","https://lrorg.erpnext.com/lloyd%27s-register","https://lubinandenoch.erpnext.com/lubin-&-enoch","https://madaluxes.erpnext.com/madaluxe-group","https://migizigroup.erpnext.com/migizi-group","https://mvpantarhei.erpnext.com/mv-panta-rhei","https://neelevat.erpnext.com/-neele-vat-logistics","https://netchange.erpnext.com/netchange","https://nordtexts.erpnext.com/nordtext","https://nptwf.erpnext.com/nexperia-newport","https://nycallliance.erpnext.com/nyc-alliance","https://oceanwidecrew.erpnext.com/oceanwide","https://ohi-pt.erpnext.com/omni-helicopter-internationa","https://petrotechinc.erpnext.com/petrotech","https://phantomchef.erpnext.com/phantom-chef","https://polytec.erpnext.com/polytec","https://powerling.erpnext.com/powerling","https://rieder-verdonck.erpnext.com/rieder-&-verdonck","https://rtff-ie.erpnext.com/rtff-business-services-ltd","https://sadiv.erpnext.com/sadiv","https://safs-uk.erpnext.com/safs-ltd","https://savageengineering.erpnext.com/savageengineeringservices-past-dues-lnvoices-005421-c6951c1561b1a0baa3ce10024a0daafab34359352526download25","https://sb-international.erpnext.com/s-b-international")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://sfp-uk.erpnext.com/sfp-uk-limited","https://slblarkhall.erpnext.com/ferwedafgartwgvdfvwgt4ghrwgrwethnrttryhytee","https://smc-pl.erpnext.com/smc-industrial-automation-polska","https://snovalley.erpnext.com/snovalley","https://speedlinks.erpnext.com/speedlink","https://telade.erpnext.com/telade","https://thoms-aviation.erpnext.com/thoms-aviation","https://tnmarine-nl.erpnext.com/true-north-marine-b.v","https://trescon.erpnext.com/3con","https://trinityavl.erpnext.com/trinity-avl","https://xmaxerox.erpnext.com/xma-technological-solutions","https://1drv.ms:443/o/s!BFXzhgvUz7FEkw6-FODuiMdZoIQ4?e=iYFni00oxk2hGp3PE_Znsw&at=9","https://onedrive.live.com/redir?resid=EB60680693E79E45!324&authkey=!AN0n1unp39Prpvk&ithint=file%2cpdf&e=TvQQee","https://share.sender.net/campaigns/2G8r/files","https://share.sender.net/campaigns/2H1f/files","https://share.sender.net/campaigns/2PDU/filess","https://share.sender.net/campaigns/2PXQ/messages","https://share.sender.net/campaigns/2QWO/documentsss","https://share.sender.net/campaigns/2QZw/emailssss","https://share.sender.net/campaigns/2R1o/broadleafgame","https://share.sender.net/campaigns/2RUB/handlesafe","https://share.sender.net/campaigns/2TCl/messagazss","https://share.sender.net/campaigns/2wqv/docs","https://share.sender.net/campaigns/2yjh/fhjdh","https://share.sender.net/campaigns/2yJP/files","https://share.sender.net/campaigns/2yll/filex","https://share.sender.net/campaigns/2yn5/docs","https://share.sender.net/campaigns/2ynC/files","https://share.sender.net/campaigns/3aeY/docsx","https://share.sender.net/campaigns/3ahf/filesx","https://share.sender.net/campaigns/3b3z/propos","https://share.sender.net/campaigns/3eX7/shaffnerheaney","https://share.sender.net/campaigns/3f5N/keelsavocats","https://share.sender.net/campaigns/3fDw/audixia","https://share.sender.net/campaigns/3fl2/proposedme")
