index=activity AND rg_functionality="Email / Email Security" AND emailsenderdomain NOT NULL AND (emailsenderdomain CONTAINS "zreffertalt.com.com" OR emailsenderdomain CONTAINS "zreffesral.com.com" OR emailsenderdomain CONTAINS "kzreffertal.com.com" OR emailsenderdomain CONTAINS "wzreffertal.com.com" OR emailsenderdomain CONTAINS "refferal.comq" OR emailsenderdomain CONTAINS "refferal.net" OR emailsenderdomain CONTAINS "zreffertal.com.com" OR emailsenderdomain CONTAINS "zrefferal.com.com" OR emailsenderdomain CONTAINS "refferasl.com.com" OR emailsenderdomain CONTAINS "zreffesral.com" OR emailsenderdomain CONTAINS "zrefsfertal.com.com" OR emailsenderdomain CONTAINS "irefferal.com" OR emailsenderdomain CONTAINS "refferasl.co" OR emailsenderdomain CONTAINS "zrefferal.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND emailsenderdomain NOT NULL AND (emailsenderdomain CONTAINS "zreffertalt.com.com" OR emailsenderdomain CONTAINS "zreffesral.com.com" OR emailsenderdomain CONTAINS "kzreffertal.com.com" OR emailsenderdomain CONTAINS "wzreffertal.com.com" OR emailsenderdomain CONTAINS "refferal.comq" OR emailsenderdomain CONTAINS "refferal.net" OR emailsenderdomain CONTAINS "zreffertal.com.com" OR emailsenderdomain CONTAINS "zrefferal.com.com" OR emailsenderdomain CONTAINS "refferasl.com.com" OR emailsenderdomain CONTAINS "zreffesral.com" OR emailsenderdomain CONTAINS "zrefsfertal.com.com" OR emailsenderdomain CONTAINS "irefferal.com" OR emailsenderdomain CONTAINS "refferasl.co" OR emailsenderdomain CONTAINS "zrefferal.com")
index=activity AND rg_functionality="Email / Email Security" AND emailrecipientdomain NOT NULL AND (emailrecipientdomain CONTAINS "zreffertalt.com.com" OR emailrecipientdomain CONTAINS "zreffesral.com.com" OR emailrecipientdomain CONTAINS "kzreffertal.com.com" OR emailrecipientdomain CONTAINS "wzreffertal.com.com" OR emailrecipientdomain CONTAINS "refferal.comq" OR emailrecipientdomain CONTAINS "refferal.net" OR emailrecipientdomain CONTAINS "zreffertal.com.com" OR emailrecipientdomain CONTAINS "zrefferal.com.com" OR emailrecipientdomain CONTAINS "refferasl.com.com" OR emailrecipientdomain CONTAINS "zreffesral.com" OR emailrecipientdomain CONTAINS "zrefsfertal.com.com" OR emailrecipientdomain CONTAINS "irefferal.com" OR emailrecipientdomain CONTAINS "refferasl.co" OR emailrecipientdomain CONTAINS "zrefferal.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND emailrecipientdomain NOT NULL AND (emailrecipientdomain CONTAINS "zreffertalt.com.com" OR emailrecipientdomain CONTAINS "zreffesral.com.com" OR emailrecipientdomain CONTAINS "kzreffertal.com.com" OR emailrecipientdomain CONTAINS "wzreffertal.com.com" OR emailrecipientdomain CONTAINS "refferal.comq" OR emailrecipientdomain CONTAINS "refferal.net" OR emailrecipientdomain CONTAINS "zreffertal.com.com" OR emailrecipientdomain CONTAINS "zrefferal.com.com" OR emailrecipientdomain CONTAINS "refferasl.com.com" OR emailrecipientdomain CONTAINS "zreffesral.com" OR emailrecipientdomain CONTAINS "zrefsfertal.com.com" OR emailrecipientdomain CONTAINS "irefferal.com" OR emailrecipientdomain CONTAINS "refferasl.co" OR emailrecipientdomain CONTAINS "zrefferal.com")
